Skip to content
Fencer Intel
medium 5.2

CVE-2019-6337 json

For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert.

published 7y ago modified 4mo ago also EUVD-2019-15902

cvss
5.2
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 36%
public exploits
0
none known

Summary

For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device.

Patch / fix

  • hp d9l63a_firmware 001.1937c
  • hp d9l64a_firmware 001.1937c
  • hp t0g70a_firmware 001.1937c
  • hp j3p65a_firmware 001.1937c
  • hp j3p68a_firmware 001.1937c
  • hp j6u57a_firmware 001.1937d
  • hp j6u57b_firmware 001.1937d
  • hp j9v80a_firmware 001.1937d
  • hp j9v80b_firmware 001.1937d
  • hp j6u55a_firmware 001.1937d
  • hp j6u55d_firmware 001.1937d
  • hp j6u51b_firmware 001.1937d
  • hp j9v82a_firmware 001.1937d
  • hp j9v82d_firmware 001.1937d
  • hp j9v78b_firmware 001.1937d
  • hp d3q15a_firmware 001.1937d
  • hp d3q15b_firmware 001.1937d
  • hp d3q15d_firmware 001.1937d
  • hp d3q16a_firmware 001.1937d
  • hp d3q16d_firmware 001.1937d

Is CVE-2019-6337 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Exploit prediction

0.42% chance of exploitation in the next 30 days, higher than 36% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 3.1 5.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
NVD 2.0 3.3 AV:L/AC:M/Au:N/C:P/I:N/A:P

Affected products

  • n/a HP OfficeJet Pro 8210 Printer series,HP PageWide 352dw Printer,HP PageWide 377dw Multifunction Printer,HP PageWide Managed P55250dw Printer series,HP PageWide Managed P57750dw Multifunction Printer series,HP PageWide Managed P52750dw Multifunction Printer,HP PageWide Pro 452dn Printer series,HP PageWide Pro 452dw Printer series,HP PageWide Pro 477dn Multifunction Printer series,HP PageWide Pro 477dw Multifunction Printer series,HP PageWide Pro 552dw Printer series,HP PageWide Pro 577dw Multifunction Printer series

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.