CVE-2025-26506: hp, inc. certain hp laserjet pro, hp laserjet enterprise, hp laserjet managed printers Stack-based Buffer Overflow

Vulnerability summary

CVE-2025-26506 is a critical (CVSS 9.8) Stack-based Buffer Overflow vulnerability in hp, inc. certain hp laserjet pro, hp laserjet enterprise, hp laserjet managed printers. EPSS estimates a 1.11% chance of exploitation in the next 30 days, higher than 65.3% of scored vulnerabilities.

Timeline

1. 14-02-2025
   PublishedVulnerability first disclosed.
2. 14-02-2025
   Last modifiedVulnerability information updated.

Description

Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.

• CWE-121Stack-based Buffer OverflowA stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).