{"id":"DEBIAN-CVE-2026-14544","details":"A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in the hpcups processing path when handling specially crafted print data.","modified":"2026-07-26T14:00:41.230825106Z","published":"2026-07-03T08:16:24.433Z","withdrawn":"2026-07-26T14:00:41.230824888Z","upstream":["CVE-2026-14544"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2026-14544"}],"affected":[{"package":{"name":"hplip","ecosystem":"Debian:11","purl":"pkg:deb/debian/hplip?arch=source&distro=bullseye"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.21.12+dfsg0-1","3.21.2+dfsg1-2","3.21.2+dfsg1-2+exp0","3.21.4+dfsg0-1","3.21.6+dfsg0-1","3.21.8+dfsg0-1","3.21.8+dfsg0-2","3.22.10+dfsg0-1","3.22.10+dfsg0-2","3.22.10+dfsg0-3","3.22.10+dfsg0-3.1~exp1","3.22.10+dfsg0-4","3.22.10+dfsg0-5","3.22.10+dfsg0-5.1","3.22.10+dfsg0-6","3.22.10+dfsg0-7","3.22.10+dfsg0-8","3.22.10+dfsg0-8.1","3.22.2+dfsg0-1","3.22.4+dfsg0-1","3.22.6+dfsg0-1","3.26.4+dfsg0-1","3.26.4+dfsg0-2"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-14544.json"}},{"package":{"name":"hplip","ecosystem":"Debian:12","purl":"pkg:deb/debian/hplip?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.22.10+dfsg0-2","3.22.10+dfsg0-3","3.22.10+dfsg0-3.1~exp1","3.22.10+dfsg0-4","3.22.10+dfsg0-5","3.22.10+dfsg0-5.1","3.22.10+dfsg0-6","3.22.10+dfsg0-7","3.22.10+dfsg0-8","3.22.10+dfsg0-8.1","3.26.4+dfsg0-1","3.26.4+dfsg0-2"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-14544.json"}},{"package":{"name":"hplip","ecosystem":"Debian:13","purl":"pkg:deb/debian/hplip?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.22.10+dfsg0-8.1","3.26.4+dfsg0-1","3.26.4+dfsg0-2"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-14544.json"}},{"package":{"name":"hplip","ecosystem":"Debian:14","purl":"pkg:deb/debian/hplip?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.22.10+dfsg0-8.1","3.26.4+dfsg0-1","3.26.4+dfsg0-2"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-14544.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}