What’s Vulnerable › Vulnerabilities

CVE-2021-3438

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-05-20 · updated 2026-06-17
• Weakness: CWE-120

Description

A potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could lead to an escalation of privilege.

Affected products

• HP Color Laser 150 4Zb94A: all versions
• HP Color Laser 150 4Zb95A: all versions
• HP Color Laser Mfp 170 4Zb96A: all versions
• HP Color Laser Mfp 170 4Zb97A: all versions
• HP Color Laser Mfp 170 6Hu08A: all versions
• HP Color Laser Mfp 170 6Hu09A: all versions
• HP Laser 100 209U7A: all versions
• HP Laser 100 4Zb79A: all versions
• HP Laser 100 4Zb80A: all versions
• HP Laser 100 4Zb81A: all versions
• HP Laser 100 5Ue14A: all versions
• HP Laser 408 7Uq75A: all versions
• HP Laser Mfp 130 4Zb82A: all versions
• HP Laser Mfp 130 4Zb83A: all versions
• HP Laser Mfp 130 4Zb84A: all versions
• HP Laser Mfp 130 4Zb85A: all versions
• HP Laser Mfp 130 4Zb86A: all versions
• HP Laser Mfp 130 4Zb87A: all versions
• HP Laser Mfp 130 4Zb88A: all versions
• HP Laser Mfp 130 4Zb89A: all versions
• HP Laser Mfp 130 4Zb90A: all versions
• HP Laser Mfp 130 4Zb91A: all versions
• HP Laser Mfp 130 4Zb92A: all versions
• HP Laser Mfp 130 4Zb93A: all versions
• HP Laser Mfp 130 5Ue15A: all versions
• HP Laser Mfp 130 6Hu10A: all versions
• HP Laser Mfp 130 6Hu11A: all versions
• HP Laser Mfp 130 6Hu12A: all versions
• HP Laser Mfp 130 9Vv52A: all versions
• HP Laser Mfp 432 7Uq76A: all versions

References

• https://support.hp.com/us-en/document/ish_3900395-3833905-16
• https://support.hp.com/us-en/document/ish_3900395-3833905-16

Get alerted when CVE-2021-3438 or the next vulnerability affects your stack