CVE-2019-6337

Severity: medium (CVSS 5.2 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-11-07 · updated 2026-06-17

Description

For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device.

Affected products

HP 2Dr21D Firmware: before 001.1937d — fixed in 001.1937d
HP D3Q15A Firmware: before 001.1937d — fixed in 001.1937d
HP D3Q15B Firmware: before 001.1937d — fixed in 001.1937d
HP D3Q15D Firmware: before 001.1937d — fixed in 001.1937d
HP D3Q16A Firmware: before 001.1937d — fixed in 001.1937d
HP D3Q16D Firmware: before 001.1937d — fixed in 001.1937d
HP D3Q17A Firmware: before 001.1937d — fixed in 001.1937d
HP D3Q17D Firmware: before 001.1937d — fixed in 001.1937d
HP D3Q19A Firmware: before 001.1937d — fixed in 001.1937d
HP D3Q19B Firmware: before 001.1937d — fixed in 001.1937d
HP D3Q19D Firmware: before 001.1937d — fixed in 001.1937d
HP D3Q20A Firmware: before 001.1937d — fixed in 001.1937d
HP D3Q20B Firmware: before 001.1937d — fixed in 001.1937d
HP D3Q20C Firmware: before 001.1937d — fixed in 001.1937d
HP D3Q20D Firmware: before 001.1937d — fixed in 001.1937d
HP D3Q21A Firmware: before 001.1937d — fixed in 001.1937d
HP D3Q21B Firmware: before 001.1937d — fixed in 001.1937d
HP D3Q21C Firmware: before 001.1937d — fixed in 001.1937d
HP D3Q21D Firmware: before 001.1937d — fixed in 001.1937d
HP D9L63A Firmware: before 001.1937c — fixed in 001.1937c
HP D9L64A Firmware: before 001.1937c — fixed in 001.1937c
HP J3P65A Firmware: before 001.1937c — fixed in 001.1937c
HP J3P68A Firmware: before 001.1937c — fixed in 001.1937c
HP J6U51B Firmware: before 001.1937d — fixed in 001.1937d
HP J6U55A Firmware: before 001.1937d — fixed in 001.1937d
HP J6U55D Firmware: before 001.1937d — fixed in 001.1937d
HP J6U57A Firmware: before 001.1937d — fixed in 001.1937d
HP J6U57B Firmware: before 001.1937d — fixed in 001.1937d
HP J9V78B Firmware: before 001.1937d — fixed in 001.1937d
HP J9V80A Firmware: before 001.1937d — fixed in 001.1937d

How to fix

Upgrade to a fixed version: HP 2Dr21D Firmware 001.1937d; HP D3Q15A Firmware 001.1937d; HP D3Q15B Firmware 001.1937d; HP D3Q15D Firmware 001.1937d; HP D3Q16A Firmware 001.1937d; HP D3Q16D Firmware 001.1937d; HP D3Q17A Firmware 001.1937d; HP D3Q17D Firmware 001.1937d; HP D3Q19A Firmware 001.1937d; HP D3Q19B Firmware 001.1937d; HP D3Q19D Firmware 001.1937d; HP D3Q20A Firmware 001.1937d. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2019-6337 or the next vulnerability affects your stack