CVE-2019-16240

Severity: critical (CVSS 9.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-11-09 · updated 2026-06-17
Weakness: CWE-120

Description

A Buffer Overflow and Information Disclosure issue exists in HP OfficeJet Pro Printers before 001.1937C, and HP PageWide Managed Printers and HP PageWide Pro Printers before 001.1937D exists; A maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device.

Affected products

HP Officejet Pro 8210 D9L63A Firmware: before 001.1937c — fixed in 001.1937c
HP Officejet Pro 8210 D9L64A Firmware: before 001.1937c — fixed in 001.1937c
HP Officejet Pro 8210 J3P65A Firmware: before 001.1937c — fixed in 001.1937c
HP Officejet Pro 8210 J3P68A Firmware: before 001.1937c — fixed in 001.1937c
HP Officejet Pro 8210 T0G70A Firmware: before 001.1937c — fixed in 001.1937c
HP Pagewide 352Dw J6U57A Firmware: before 001.1937d — fixed in 001.1937d
HP Pagewide 352Dw J6U57B Firmware: before 001.1937d — fixed in 001.1937d
HP Pagewide 377Dw J9V80A Firmware: before 001.1937d — fixed in 001.1937d
HP Pagewide 377Dw J9V80B Firmware: before 001.1937d — fixed in 001.1937d
HP Pagewide Managed P52750Dw J9V78B Firmware: before 001.1937d — fixed in 001.1937d
HP Pagewide Managed P52750Dw J9V82A Firmware: before 001.1937d — fixed in 001.1937d
HP Pagewide Managed P52750Dw J9V82D Firmware: before 001.1937d — fixed in 001.1937d
HP Pagewide Managed P55250Dw J6U51B Firmware: before 001.1937d — fixed in 001.1937d
HP Pagewide Managed P55250Dw J6U55A Firmware: before 001.1937d — fixed in 001.1937d
HP Pagewide Managed P55250Dw J6U55D Firmware: before 001.1937d — fixed in 001.1937d
HP Pagewide Managed P57750Dw J9V78B Firmware: before 001.1937d — fixed in 001.1937d
HP Pagewide Managed P57750Dw J9V82A Firmware: before 001.1937d — fixed in 001.1937d
HP Pagewide Managed P57750Dw J9V82D Firmware: before 001.1937d — fixed in 001.1937d
HP Pagewide Pro 452Dn D3Q15A Firmware: before 001.1937d — fixed in 001.1937d
HP Pagewide Pro 452Dn D3Q15B Firmware: before 001.1937d — fixed in 001.1937d
HP Pagewide Pro 452Dn D3Q15D Firmware: before 001.1937d — fixed in 001.1937d
HP Pagewide Pro 452Dw D3Q16A Firmware: before 001.1937d — fixed in 001.1937d
HP Pagewide Pro 452Dw D3Q16D Firmware: before 001.1937d — fixed in 001.1937d
HP Pagewide Pro 452Dw W2Z52B Firmware: before 001.1937d — fixed in 001.1937d
HP Pagewide Pro 477Dn D3Q19A Firmware: before 001.1937d — fixed in 001.1937d
HP Pagewide Pro 477Dn D3Q19B Firmware: before 001.1937d — fixed in 001.1937d
HP Pagewide Pro 477Dn D3Q19D Firmware: before 001.1937d — fixed in 001.1937d
HP Pagewide Pro 477Dw D3Q20A Firmware: before 001.1937d — fixed in 001.1937d
HP Pagewide Pro 477Dw D3Q20B Firmware: before 001.1937d — fixed in 001.1937d
HP Pagewide Pro 477Dw D3Q20C Firmware: before 001.1937d — fixed in 001.1937d

How to fix

Upgrade to a fixed version: HP Officejet Pro 8210 D9L63A Firmware 001.1937c; HP Officejet Pro 8210 D9L64A Firmware 001.1937c; HP Officejet Pro 8210 J3P65A Firmware 001.1937c; HP Officejet Pro 8210 J3P68A Firmware 001.1937c; HP Officejet Pro 8210 T0G70A Firmware 001.1937c; HP Pagewide 352Dw J6U57A Firmware 001.1937d; HP Pagewide 352Dw J6U57B Firmware 001.1937d; HP Pagewide 377Dw J9V80A Firmware 001.1937d; HP Pagewide 377Dw J9V80B Firmware 001.1937d; HP Pagewide Managed P52750Dw J9V78B Firmware 001.1937d; HP Pagewide Managed P52750Dw J9V82A Firmware 001.1937d; HP Pagewide Managed P52750Dw J9V82D Firmware 001.1937d. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2019-16240 or the next vulnerability affects your stack