CVE-2024-0794

Published: Feb 20, 2024Modified: Jun 17, 2026Deferred

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Certain HP LaserJet Pro, HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to Remote Code Execution due to buffer overflow when rendering fonts embedded in a PDF file.

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (2)

https://support.hp.com/us-en/document/ish_10174031-10174074-16/

Source: hp-security-alert@hp.com

https://support.hp.com/us-en/document/ish_10174031-10198670-16

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.