What’s Vulnerable › Vulnerabilities

CVE-2019-10627

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-11-21 · updated 2026-06-17
• Weakness: CWE-119

Description

Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters due to incorrect buffer size calculation. in PostScript and PDF printers that use IPS versions prior to 2019.2 in PostScript and PDF printers that use IPS versions prior to 2019.2

Affected products

• HP 2Dr21D Firmware: before 001.1937d — fixed in 001.1937d
• HP D3Q15A Firmware: before 001.1937d — fixed in 001.1937d
• HP D3Q15B Firmware: before 001.1937d — fixed in 001.1937d
• HP D3Q15D Firmware: before 001.1937d — fixed in 001.1937d
• HP D3Q16A Firmware: before 001.1937d — fixed in 001.1937d
• HP D3Q16D Firmware: before 001.1937d — fixed in 001.1937d
• HP D3Q17A Firmware: before 001.1937d — fixed in 001.1937d
• HP D3Q17D Firmware: before 001.1937d — fixed in 001.1937d
• HP D3Q19A Firmware: before 001.1937d — fixed in 001.1937d
• HP D3Q19B Firmware: before 001.1937d — fixed in 001.1937d
• HP D3Q19D Firmware: before 001.1937d — fixed in 001.1937d
• HP D3Q20A Firmware: before 001.1937d — fixed in 001.1937d
• HP D3Q20B Firmware: before 001.1937d — fixed in 001.1937d
• HP D3Q20C Firmware: before 001.1937d — fixed in 001.1937d
• HP D3Q20D Firmware: before 001.1937d — fixed in 001.1937d
• HP D3Q21A Firmware: before 001.1937d — fixed in 001.1937d
• HP D3Q21B Firmware: before 001.1937d — fixed in 001.1937d
• HP D3Q21C Firmware: before 001.1937d — fixed in 001.1937d
• HP D3Q21D Firmware: before 001.1937d — fixed in 001.1937d
• HP D9L63A Firmware: before 001.1937c — fixed in 001.1937c
• HP D9L64A Firmware: before 001.1937c — fixed in 001.1937c
• HP J3P65A Firmware: before 001.1937c — fixed in 001.1937c
• HP J3P68A Firmware: before 001.1937c — fixed in 001.1937c
• HP J6U51B Firmware: before 001.1937d — fixed in 001.1937d
• HP J6U55A Firmware: before 001.1937d — fixed in 001.1937d
• HP J6U55D Firmware: before 001.1937d — fixed in 001.1937d
• HP J6U57A Firmware: before 001.1937d — fixed in 001.1937d
• HP J6U57B Firmware: before 001.1937d — fixed in 001.1937d
• HP J9V78B Firmware: before 001.1937d — fixed in 001.1937d
• HP J9V80A Firmware: before 001.1937d — fixed in 001.1937d

How to fix

Upgrade to a fixed version: HP 2Dr21D Firmware 001.1937d; HP D3Q15A Firmware 001.1937d; HP D3Q15B Firmware 001.1937d; HP D3Q15D Firmware 001.1937d; HP D3Q16A Firmware 001.1937d; HP D3Q16D Firmware 001.1937d; HP D3Q17A Firmware 001.1937d; HP D3Q17D Firmware 001.1937d; HP D3Q19A Firmware 001.1937d; HP D3Q19B Firmware 001.1937d; HP D3Q19D Firmware 001.1937d; HP D3Q20A Firmware 001.1937d. Check the vendor advisory for mitigations.

References

• https://support.hp.com/us-en/document/c06458150
• https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin
• https://support.hp.com/us-en/document/c06458150
• https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin

Get alerted when CVE-2019-10627 or the next vulnerability affects your stack