CVE-2019-6327

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-06-17 · updated 2026-06-17
Weakness: CWE-120

Description

HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 20190426) may have an IPP Parser potentially vulnerable to Buffer Overflow.

Affected products

HP Laserjet Pro M280-M281 T6B80A Firmware: before 20190419 — fixed in 20190419
HP Laserjet Pro M280-M281 T6B81A Firmware: before 20190419 — fixed in 20190419
HP Laserjet Pro M280-M281 T6B82A Firmware: before 20190419 — fixed in 20190419
HP Laserjet Pro M280-M281 T6B83A Firmware: before 20190419 — fixed in 20190419
HP Laserjet Pro Mfp M28-M31 W2G54A Firmware: before 20190426 — fixed in 20190426
HP Laserjet Pro Mfp M28-M31 W2G55A Firmware: before 20190426 — fixed in 20190426
HP Laserjet Pro Mfp M28-M31 Y5S50A Firmware: before 20190426 — fixed in 20190426
HP Laserjet Pro Mfp M28-M31 Y5S53A Firmware: before 20190426 — fixed in 20190426
HP Laserjet Pro Mfp M28-M31 Y5S54A Firmware: before 20190426 — fixed in 20190426
HP Laserjet Pro Mfp M28-M31 Y5S55A Firmware: before 20190426 — fixed in 20190426

How to fix

Upgrade to a fixed version: HP Laserjet Pro M280-M281 T6B80A Firmware 20190419; HP Laserjet Pro M280-M281 T6B81A Firmware 20190419; HP Laserjet Pro M280-M281 T6B82A Firmware 20190419; HP Laserjet Pro M280-M281 T6B83A Firmware 20190419; HP Laserjet Pro Mfp M28-M31 W2G54A Firmware 20190426; HP Laserjet Pro Mfp M28-M31 W2G55A Firmware 20190426; HP Laserjet Pro Mfp M28-M31 Y5S50A Firmware 20190426; HP Laserjet Pro Mfp M28-M31 Y5S53A Firmware 20190426; HP Laserjet Pro Mfp M28-M31 Y5S54A Firmware 20190426; HP Laserjet Pro Mfp M28-M31 Y5S55A Firmware 20190426. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2019-6327 or the next vulnerability affects your stack