{"id":"USN-9037-1","summary":"hplip vulnerabilities","details":"It was discovered that HPLIP did not properly handle certain data, which\ncould result in an out-of-bounds write. An attacker could possibly use this\nissue to cause a denial of service, expose sensitive information or execute\narbitrary code. (CVE-2026-91097)\n\nIt was discovered that HPLIP did not properly handle certain input, which\ncould result in a heap-based buffer overflow. An attacker could possibly\nuse this issue to cause a denial of service, expose sensitive information\nor execute arbitrary code. (CVE-2026-91098)\n\nIt was discovered that HPLIP created certain files with insecure\npermissions. An attacker could possibly use this issue to expose or modify\nsensitive information. (CVE-2026-91099)\n\nIt was discovered that HPLIP did not properly handle certain input while\nissuing an OS command. An attacker could possibly use this issue to execute\narbitrary commands. This issue only affected Ubuntu 16.04 LTS and Ubuntu\n18.04 LTS. (CVE-2026-91100)\n\nIt was discovered that HPLIP did not properly validate certain array\nindices. An attacker could possibly use this issue to cause a denial of\nservice, expose sensitive information or execute arbitrary code.\n(CVE-2026-91101)\n\nIt was discovered that HPLIP did not properly handle certain input while\nissuing an OS command. An attacker could possibly use this issue to execute\narbitrary commands. (CVE-2026-91102)\n\nIt was discovered that HPLIP did not properly handle certain numeric\nvalues, which could result in an integer underflow. An attacker could\npossibly use this issue to cause a denial of service, expose sensitive\ninformation or execute arbitrary code. (CVE-2026-91103)\n\nIt was discovered that HPLIP did not properly handle certain input, which\ncould result in a heap-based buffer overflow. An attacker could possibly\nuse this issue to cause a denial of service, expose sensitive information\nor execute arbitrary code. (CVE-2026-91104, CVE-2026-91105, CVE-2026-91106)","modified":"2026-11-11T09:44:37.517856326Z","published":"2026-11-10T19:50:31Z","related":["UBUNTU-CVE-2026-91097","UBUNTU-CVE-2026-91098","UBUNTU-CVE-2026-91099","UBUNTU-CVE-2026-91100","UBUNTU-CVE-2026-91101","UBUNTU-CVE-2026-91102","UBUNTU-CVE-2026-91103","UBUNTU-CVE-2026-91104","UBUNTU-CVE-2026-91105","UBUNTU-CVE-2026-91106"],"upstream":["CVE-2026-91097","CVE-2026-91098","CVE-2026-91099","CVE-2026-91100","CVE-2026-91101","CVE-2026-91102","CVE-2026-91103","CVE-2026-91104","CVE-2026-91105","CVE-2026-91106","UBUNTU-CVE-2026-91097","UBUNTU-CVE-2026-91098","UBUNTU-CVE-2026-91099","UBUNTU-CVE-2026-91100","UBUNTU-CVE-2026-91101","UBUNTU-CVE-2026-91102","UBUNTU-CVE-2026-91103","UBUNTU-CVE-2026-91104","UBUNTU-CVE-2026-91105","UBUNTU-CVE-2026-91106"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-9037-1"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-91097"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-91098"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-91099"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-91100"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-91101"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-91102"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-91103"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-91104"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-91105"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-91106"}],"affected":[{"package":{"name":"hplip","ecosystem":"Ubuntu:Pro:16.04:LTS","purl":"pkg:deb/ubuntu/hplip?arch=source&distro=esm-infra-legacy%2Fxenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.3+repack0-1ubuntu0.1~esm2"}]}],"versions":["3.15.7-0ubuntu4","3.15.7-0ubuntu5","3.15.11-0ubuntu1","3.15.11+repack0-1","3.15.11+repack0-1ubuntu1","3.16.2+repack0-1","3.16.2+repack0-1ubuntu1","3.16.2+repack0-3","3.16.3+repack0-1"],"ecosystem_specific":{"binaries":[{"binary_name":"hpijs-ppds","binary_version":"3.16.3+repack0-1ubuntu0.1~esm2"},{"binary_version":"3.16.3+repack0-1ubuntu0.1~esm2","binary_name":"hplip"},{"binary_version":"3.16.3+repack0-1ubuntu0.1~esm2","binary_name":"hplip-data"},{"binary_name":"hplip-gui","binary_version":"3.16.3+repack0-1ubuntu0.1~esm2"},{"binary_version":"3.16.3+repack0-1ubuntu0.1~esm2","binary_name":"libhpmud0"},{"binary_version":"3.16.3+repack0-1ubuntu0.1~esm2","binary_name":"libsane-hpaio"},{"binary_name":"printer-driver-hpcups","binary_version":"3.16.3+repack0-1ubuntu0.1~esm2"},{"binary_name":"printer-driver-hpijs","binary_version":"3.16.3+repack0-1ubuntu0.1~esm2"},{"binary_version":"3.16.3+repack0-1ubuntu0.1~esm2","binary_name":"printer-driver-postscript-hp"}],"availability":"Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9037-1.json","cves_map":{"cves":[{"severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-91097"},{"id":"CVE-2026-91098","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-91099","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-91100"},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-91101"},{"severity":[{"score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-91102"},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-91103"},{"id":"CVE-2026-91104","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"score":"medium","type":"Ubuntu"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-91105"},{"id":"CVE-2026-91106","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]}],"ecosystem":"Ubuntu:Pro:16.04:LTS"}}},{"package":{"name":"hplip","ecosystem":"Ubuntu:Pro:18.04:LTS","purl":"pkg:deb/ubuntu/hplip?arch=source&distro=esm-infra%2Fbionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.17.10+repack0-5ubuntu0.1~esm2"}]}],"versions":["3.17.7+repack0-3","3.17.10+repack0-1","3.17.10+repack0-2","3.17.10+repack0-3","3.17.10+repack0-4","3.17.10+repack0-5"],"ecosystem_specific":{"binaries":[{"binary_name":"hpijs-ppds","binary_version":"3.17.10+repack0-5ubuntu0.1~esm2"},{"binary_version":"3.17.10+repack0-5ubuntu0.1~esm2","binary_name":"hplip"},{"binary_version":"3.17.10+repack0-5ubuntu0.1~esm2","binary_name":"hplip-data"},{"binary_name":"hplip-gui","binary_version":"3.17.10+repack0-5ubuntu0.1~esm2"},{"binary_version":"3.17.10+repack0-5ubuntu0.1~esm2","binary_name":"libhpmud0"},{"binary_version":"3.17.10+repack0-5ubuntu0.1~esm2","binary_name":"libsane-hpaio"},{"binary_name":"printer-driver-hpcups","binary_version":"3.17.10+repack0-5ubuntu0.1~esm2"},{"binary_name":"printer-driver-hpijs","binary_version":"3.17.10+repack0-5ubuntu0.1~esm2"},{"binary_name":"printer-driver-postscript-hp","binary_version":"3.17.10+repack0-5ubuntu0.1~esm2"}],"availability":"Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:Pro:18.04:LTS","cves":[{"id":"CVE-2026-91097","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-91098","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"score":"medium","type":"Ubuntu"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-91099"},{"id":"CVE-2026-91100","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"score":"medium","type":"Ubuntu"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-91101"},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-91102"},{"severity":[{"score":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-91103"},{"id":"CVE-2026-91104","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-91105"},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-91106"}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9037-1.json"}},{"package":{"name":"hplip","ecosystem":"Ubuntu:Pro:20.04:LTS","purl":"pkg:deb/ubuntu/hplip?arch=source&distro=esm-infra%2Ffocal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.3+dfsg0-2ubuntu0.1+esm2"}]}],"versions":["3.19.6+dfsg0-1ubuntu1","3.19.8+dfsg0-7","3.19.11+dfsg0-1","3.19.12+dfsg0-1","3.19.12+dfsg0-2","3.19.12+dfsg0-3","3.19.12+dfsg0-3ubuntu1","3.19.12+dfsg0-4ubuntu1","3.20.3+dfsg0-1","3.20.3+dfsg0-2","3.20.3+dfsg0-2ubuntu0.1"],"ecosystem_specific":{"binaries":[{"binary_name":"hpijs-ppds","binary_version":"3.20.3+dfsg0-2ubuntu0.1+esm2"},{"binary_version":"3.20.3+dfsg0-2ubuntu0.1+esm2","binary_name":"hplip"},{"binary_version":"3.20.3+dfsg0-2ubuntu0.1+esm2","binary_name":"hplip-data"},{"binary_name":"hplip-gui","binary_version":"3.20.3+dfsg0-2ubuntu0.1+esm2"},{"binary_name":"libhpmud0","binary_version":"3.20.3+dfsg0-2ubuntu0.1+esm2"},{"binary_version":"3.20.3+dfsg0-2ubuntu0.1+esm2","binary_name":"libsane-hpaio"},{"binary_name":"printer-driver-hpcups","binary_version":"3.20.3+dfsg0-2ubuntu0.1+esm2"},{"binary_name":"printer-driver-hpijs","binary_version":"3.20.3+dfsg0-2ubuntu0.1+esm2"},{"binary_version":"3.20.3+dfsg0-2ubuntu0.1+esm2","binary_name":"printer-driver-postscript-hp"}],"availability":"Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:Pro:20.04:LTS","cves":[{"severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-91097"},{"id":"CVE-2026-91098","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-91099"},{"id":"CVE-2026-91101","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-91102"},{"id":"CVE-2026-91103","severity":[{"score":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-91104","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"score":"medium","type":"Ubuntu"}]},{"severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-91105"},{"id":"CVE-2026-91106","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9037-1.json"}},{"package":{"name":"hplip","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/hplip?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.21.12+dfsg0-1ubuntu0.3"}]}],"versions":["3.21.6+dfsg0-0ubuntu1","3.21.8+dfsg0-2","3.21.12+dfsg0-1","3.21.12+dfsg0-1ubuntu0.1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"hpijs-ppds","binary_version":"3.21.12+dfsg0-1ubuntu0.3"},{"binary_name":"hplip","binary_version":"3.21.12+dfsg0-1ubuntu0.3"},{"binary_version":"3.21.12+dfsg0-1ubuntu0.3","binary_name":"hplip-data"},{"binary_version":"3.21.12+dfsg0-1ubuntu0.3","binary_name":"hplip-gui"},{"binary_name":"libhpmud0","binary_version":"3.21.12+dfsg0-1ubuntu0.3"},{"binary_name":"libsane-hpaio","binary_version":"3.21.12+dfsg0-1ubuntu0.3"},{"binary_name":"printer-driver-hpcups","binary_version":"3.21.12+dfsg0-1ubuntu0.3"},{"binary_version":"3.21.12+dfsg0-1ubuntu0.3","binary_name":"printer-driver-hpijs"},{"binary_version":"3.21.12+dfsg0-1ubuntu0.3","binary_name":"printer-driver-postscript-hp"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9037-1.json","cves_map":{"ecosystem":"Ubuntu:22.04:LTS","cves":[{"severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-91097"},{"id":"CVE-2026-91098","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-91099","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-91101","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-91102","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"score":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-91103"},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-91104"},{"id":"CVE-2026-91105","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-91106","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]}]}}},{"package":{"name":"hplip","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/hplip?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.23.12+dfsg0-0ubuntu5.3"}]}],"versions":["3.22.10+dfsg0-2ubuntu1","3.22.10+dfsg0-2ubuntu2","3.23.12+dfsg0-0ubuntu4","3.23.12+dfsg0-0ubuntu5","3.23.12+dfsg0-0ubuntu5.1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"hpijs-ppds","binary_version":"3.23.12+dfsg0-0ubuntu5.3"},{"binary_name":"hplip","binary_version":"3.23.12+dfsg0-0ubuntu5.3"},{"binary_name":"hplip-data","binary_version":"3.23.12+dfsg0-0ubuntu5.3"},{"binary_version":"3.23.12+dfsg0-0ubuntu5.3","binary_name":"hplip-gui"},{"binary_version":"3.23.12+dfsg0-0ubuntu5.3","binary_name":"libhpmud0"},{"binary_name":"libsane-hpaio","binary_version":"3.23.12+dfsg0-0ubuntu5.3"},{"binary_name":"printer-driver-hpcups","binary_version":"3.23.12+dfsg0-0ubuntu5.3"},{"binary_name":"printer-driver-hpijs","binary_version":"3.23.12+dfsg0-0ubuntu5.3"},{"binary_name":"printer-driver-postscript-hp","binary_version":"3.23.12+dfsg0-0ubuntu5.3"}]},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:24.04:LTS","cves":[{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-91097"},{"id":"CVE-2026-91098","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-91099","severity":[{"score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-91101","severity":[{"score":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-91102","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-91103","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-91104"},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-91105"},{"id":"CVE-2026-91106","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9037-1.json"}},{"package":{"name":"hplip","ecosystem":"Ubuntu:26.10","purl":"pkg:deb/ubuntu/hplip?arch=source&distro=stonking"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.24.4+dfsg0-0ubuntu10.2"}]}],"versions":["3.24.4+dfsg0-0ubuntu8","3.24.4+dfsg0-0ubuntu10"],"ecosystem_specific":{"binaries":[{"binary_name":"hpijs-ppds","binary_version":"3.24.4+dfsg0-0ubuntu10.2"},{"binary_version":"3.24.4+dfsg0-0ubuntu10.2","binary_name":"hplip"},{"binary_version":"3.24.4+dfsg0-0ubuntu10.2","binary_name":"hplip-data"},{"binary_name":"hplip-gui","binary_version":"3.24.4+dfsg0-0ubuntu10.2"},{"binary_version":"3.24.4+dfsg0-0ubuntu10.2","binary_name":"libhpmud0"},{"binary_name":"libsane-hpaio","binary_version":"3.24.4+dfsg0-0ubuntu10.2"},{"binary_name":"printer-driver-hpcups","binary_version":"3.24.4+dfsg0-0ubuntu10.2"},{"binary_version":"3.24.4+dfsg0-0ubuntu10.2","binary_name":"printer-driver-hpijs"},{"binary_name":"printer-driver-postscript-hp","binary_version":"3.24.4+dfsg0-0ubuntu10.2"}],"availability":"No subscription required"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9037-1.json","cves_map":{"ecosystem":"Ubuntu:26.10","cves":[{"id":"CVE-2026-91097","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-91098","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-91099","severity":[{"score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-91101","severity":[{"score":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-91102"},{"id":"CVE-2026-91103","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2026-91104","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-91105"},{"id":"CVE-2026-91106","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"score":"medium","type":"Ubuntu"}]}]}}},{"package":{"name":"hplip","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/hplip?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.24.4+dfsg0-0ubuntu8.3"}]}],"versions":["3.24.4+dfsg0-0ubuntu5","3.24.4+dfsg0-0ubuntu7","3.24.4+dfsg0-0ubuntu8","3.24.4+dfsg0-0ubuntu8.1"],"ecosystem_specific":{"binaries":[{"binary_name":"hpijs-ppds","binary_version":"3.24.4+dfsg0-0ubuntu8.3"},{"binary_version":"3.24.4+dfsg0-0ubuntu8.3","binary_name":"hplip"},{"binary_name":"hplip-data","binary_version":"3.24.4+dfsg0-0ubuntu8.3"},{"binary_version":"3.24.4+dfsg0-0ubuntu8.3","binary_name":"hplip-gui"},{"binary_name":"libhpmud0","binary_version":"3.24.4+dfsg0-0ubuntu8.3"},{"binary_name":"libsane-hpaio","binary_version":"3.24.4+dfsg0-0ubuntu8.3"},{"binary_name":"printer-driver-hpcups","binary_version":"3.24.4+dfsg0-0ubuntu8.3"},{"binary_name":"printer-driver-hpijs","binary_version":"3.24.4+dfsg0-0ubuntu8.3"},{"binary_version":"3.24.4+dfsg0-0ubuntu8.3","binary_name":"printer-driver-postscript-hp"}],"availability":"No subscription required"},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9037-1.json","cves_map":{"ecosystem":"Ubuntu:26.04:LTS","cves":[{"severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-91097"},{"severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-91098"},{"severity":[{"score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-91099"},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"medium"}],"id":"CVE-2026-91101"},{"id":"CVE-2026-91102","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-91103","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"score":"medium","type":"Ubuntu"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-91104"},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-91105"},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2026-91106"}]}}}],"schema_version":"1.9.2"}