Name: CVE-2026-8631: Heap-based Buffer Overflow
Creator: Rapid7
Published: 2026-05-20T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2026-8631, CWE-122, CWE-190, CVSS 9.8, EPSS 0.01139

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print data.

CVSS Details

CVSS 4.0 Base Score: 9.3 (CRITICAL)
CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
CVSS 3.1 Base Score: 9.8
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade hplip-libsUpgrade hplipUpgrade libsane-hpaioUpgrade hplip-guiUpgrade hplip-common	Jun 17, 2026	Jun 16, 2026
Debian	—	Upgrade hplip	Jul 27, 2026	Jul 27, 2026
Redhat_linux	—	Upgrade hplip-libsUpgrade libsane-hpaioUpgrade hplip-libs-debuginfoUpgrade hplip-debuginfoNo solution existsUpgrade hplip-guiUpgrade hplipUpgrade hplip-commonUpgrade hplip-debugsourceUpgrade libsane-hpaio-debuginfo	Jun 18, 2026	May 20, 2026
Rocky_linux	—	Upgrade hplip-commonUpgrade hplip-debuginfoUpgrade libsane-hpaio-debuginfoUpgrade hplip-debugsourceUpgrade hplip-guiUpgrade hplipUpgrade libsane-hpaioUpgrade hplip-libs-debuginfoUpgrade hplip-libs	Jun 18, 2026	Jun 17, 2026
Ubuntu	—	Upgrade hplip	Jun 30, 2026	May 20, 2026

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence