CVE-2019-10627

Critical

Description

Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters due to incorrect buffer size calculation. in PostScript and PDF printers that use IPS versions prior to 2019.2 in PostScript and PDF printers that use IPS versions prior to 2019.2

SeverityCritical
CVSS9.8
Exploit probability—
ProductQualcomm Ips
PublishedNov 21, 2019
First seenNov 21, 2019

How to fix

Update
  • qualcomm ips2019.2 or later
  • hp d9l63a_firmware001.1937c or later
  • hp d9l64a_firmware001.1937c or later
  • hp t0g70a_firmware001.1937c or later
  • hp j3p65a_firmware001.1937c or later
  • hp j3p68a_firmware001.1937c or later
  • hp j6u57a_firmware001.1937d or later
  • hp j6u57b_firmware001.1937d or later
  • hp j9v80a_firmware001.1937d or later
  • hp j9v80b_firmware001.1937d or later
  • hp j6u55a_firmware001.1937d or later
  • hp j6u55d_firmware001.1937d or later

Affected products

ProductAffected versionsFixed in
qualcomm ipsv < 2019.22019.2
hp d9l63a_firmwarev < 001.1937c001.1937c
hp d9l64a_firmwarev < 001.1937c001.1937c
hp t0g70a_firmwarev < 001.1937c001.1937c
hp j3p65a_firmwarev < 001.1937c001.1937c
hp j3p68a_firmwarev < 001.1937c001.1937c
hp j6u57a_firmwarev < 001.1937d001.1937d
hp j6u57b_firmwarev < 001.1937d001.1937d
hp j9v80a_firmwarev < 001.1937d001.1937d
hp j9v80b_firmwarev < 001.1937d001.1937d
hp j6u55a_firmwarev < 001.1937d001.1937d
hp j6u55d_firmwarev < 001.1937d001.1937d
hp j6u51b_firmwarev < 001.1937d001.1937d
hp j9v82a_firmwarev < 001.1937d001.1937d
hp j9v82d_firmwarev < 001.1937d001.1937d
hp j9v78b_firmwarev < 001.1937d001.1937d
hp d3q15a_firmwarev < 001.1937d001.1937d
hp d3q15b_firmwarev < 001.1937d001.1937d
hp d3q15d_firmwarev < 001.1937d001.1937d
hp d3q16a_firmwarev < 001.1937d001.1937d
hp d3q16d_firmwarev < 001.1937d001.1937d
hp w2z52b_firmwarev < 001.1937d001.1937d
hp d3q19a_firmwarev < 001.1937d001.1937d
hp d3q19b_firmwarev < 001.1937d001.1937d
hp d3q19d_firmwarev < 001.1937d001.1937d
hp d3q20a_firmwarev < 001.1937d001.1937d
hp d3q20b_firmwarev < 001.1937d001.1937d
hp d3q20c_firmwarev < 001.1937d001.1937d
hp d3q20d_firmwarev < 001.1937d001.1937d
hp w2z53b_firmwarev < 001.1937d001.1937d
hp 2dr21d_firmwarev < 001.1937d001.1937d
hp d3q17a_firmwarev < 001.1937d001.1937d
hp d3q17d_firmwarev < 001.1937d001.1937d
hp k9z74a_firmwarev < 001.1937d001.1937d
hp k9z74d_firmwarev < 001.1937d001.1937d
hp d3q21a_firmwarev < 001.1937d001.1937d
hp d3q21b_firmwarev < 001.1937d001.1937d
hp d3q21c_firmwarev < 001.1937d001.1937d
hp d3q21d_firmwarev < 001.1937d001.1937d
hp k9z76a_firmwarev < 001.1937d001.1937d
hp k9z76b_firmwarev < 001.1937d001.1937d
hp k9z76d_firmwarev < 001.1937d001.1937d

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.