CVE-2019-6337 json
For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert.
published 7y ago modified 4mo ago also EUVD-2019-15902
- cvss
- 5.2
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 36%
- public exploits
- 0
- none known
Summary
For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device.
Patch / fix
- hp d9l63a_firmware 001.1937c
- hp d9l64a_firmware 001.1937c
- hp t0g70a_firmware 001.1937c
- hp j3p65a_firmware 001.1937c
- hp j3p68a_firmware 001.1937c
- hp j6u57a_firmware 001.1937d
- hp j6u57b_firmware 001.1937d
- hp j9v80a_firmware 001.1937d
- hp j9v80b_firmware 001.1937d
- hp j6u55a_firmware 001.1937d
- hp j6u55d_firmware 001.1937d
- hp j6u51b_firmware 001.1937d
- hp j9v82a_firmware 001.1937d
- hp j9v82d_firmware 001.1937d
- hp j9v78b_firmware 001.1937d
- hp d3q15a_firmware 001.1937d
- hp d3q15b_firmware 001.1937d
- hp d3q15d_firmware 001.1937d
- hp d3q16a_firmware 001.1937d
- hp d3q16d_firmware 001.1937d
Is CVE-2019-6337 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerExploit prediction
0.42% chance of exploitation in the next 30 days, higher than 36% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 5.2 | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L |
| NVD | 2.0 | 3.3 | AV:L/AC:M/Au:N/C:P/I:N/A:P |
Affected products
- n/a HP OfficeJet Pro 8210 Printer series,HP PageWide 352dw Printer,HP PageWide 377dw Multifunction Printer,HP PageWide Managed P55250dw Printer series,HP PageWide Managed P57750dw Multifunction Printer series,HP PageWide Managed P52750dw Multifunction Printer,HP PageWide Pro 452dn Printer series,HP PageWide Pro 452dw Printer series,HP PageWide Pro 477dn Multifunction Printer series,HP PageWide Pro 477dw Multifunction Printer series,HP PageWide Pro 552dw Printer series,HP PageWide Pro 577dw Multifunction Printer series
References
-
support.hp.com
/us-en/document/c06458150
vendor-advisory
Sources
- CVE List CVE-2019-6337
- NVD CVE-2019-6337
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.