CVE-2024-9423: Certain HP LaserJet Printers – Potential Denial of Service

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-10-02 · updated 2026-06-17
Weakness: CWE-241

Description

Certain HP LaserJet printers may potentially experience a denial of service when a user sends a raw JPEG file to the printer. The printer displays a “JPEG Unsupported” message which may not clear, potentially blocking queued print jobs.

Affected products

HP 1Y7D4A Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 2A129A Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 2A130A Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 2A130E Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 2R3E1A Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 2R3E2A Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 2R3E3A Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 2R3E7A Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 2R3E8A Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 2R3F0A Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 2R7F3A Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 2R7F4A Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 2R7F5A Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 2U581A Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 2U582A Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 2U582E Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 2U584A Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 2U584E Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 2U586A Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 2U587A Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 2U587E Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 2U589A Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 2U589E Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 2U589F Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 381L0A Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 381U0A Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 381U1A Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 381U2A Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 381U3A Firmware: before 2024-08-13 — fixed in 2024-08-13
HP 381U4A Firmware: before 2024-08-13 — fixed in 2024-08-13

How to fix

Upgrade to a fixed version: HP 1Y7D4A Firmware 2024-08-13; HP 2A129A Firmware 2024-08-13; HP 2A130A Firmware 2024-08-13; HP 2A130E Firmware 2024-08-13; HP 2R3E1A Firmware 2024-08-13; HP 2R3E2A Firmware 2024-08-13; HP 2R3E3A Firmware 2024-08-13; HP 2R3E7A Firmware 2024-08-13; HP 2R3E8A Firmware 2024-08-13; HP 2R3F0A Firmware 2024-08-13; HP 2R7F3A Firmware 2024-08-13; HP 2R7F4A Firmware 2024-08-13. Check the vendor advisory for mitigations.

References

https://support.hp.com/us-en/document/ish_11266441-11266463-16/hpsbpi03976

Get alerted when CVE-2024-9423 or the next vulnerability affects your stack