What’s Vulnerable › Vulnerabilities

CVE-2025-1004: Certain HP LaserJet Pro Printers – Potential Denial of Service

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-06 · updated 2026-06-17
• Weakness: CWE-241

Description

Certain HP LaserJet Pro printers may potentially experience a denial of service when a user sends a raw JPEG file to the printer via IPP (Internet Printing Protocol).

Affected products

• HP 4Pa41A Firmware: before 2024-10-25 — fixed in 2024-10-25
• HP 4Pa42A Firmware: before 2024-10-25 — fixed in 2024-10-25
• HP 4Pa43A Firmware: before 2024-10-25 — fixed in 2024-10-25
• HP 4Pa44A Firmware: before 2024-10-25 — fixed in 2024-10-25
• HP G3Q74A Firmware: before 2024-10-25 — fixed in 2024-10-25
• HP G3Q76A Firmware: before 2024-10-25 — fixed in 2024-10-25
• HP G3Q77A Firmware: before 2024-10-25 — fixed in 2024-10-25
• HP G3Q78A Firmware: before 2024-10-25 — fixed in 2024-10-25
• HP G3Q79A Firmware: before 2024-10-25 — fixed in 2024-10-25
• HP Q3Q75A Firmware: before 2024-10-25 — fixed in 2024-10-25

How to fix

Upgrade to a fixed version: HP 4Pa41A Firmware 2024-10-25; HP 4Pa42A Firmware 2024-10-25; HP 4Pa43A Firmware 2024-10-25; HP 4Pa44A Firmware 2024-10-25; HP G3Q74A Firmware 2024-10-25; HP G3Q76A Firmware 2024-10-25; HP G3Q77A Firmware 2024-10-25; HP G3Q78A Firmware 2024-10-25; HP G3Q79A Firmware 2024-10-25; HP Q3Q75A Firmware 2024-10-25. Check the vendor advisory for mitigations.

References

• https://support.hp.com/au-en/document/ish_11927586-11927615-16/hpsbpi03998

Get alerted when CVE-2025-1004 or the next vulnerability affects your stack