Name: CVE-2026-8631: Heap-based Buffer Overflow
Creator: Rapid7
Published: 2026-05-20T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2026-8631, CWE-122, CWE-190, CVSS 9.8, EPSS 0.01139

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print data.

CVSS Details

CVSS 4.0 Base Score: 9.3 (CRITICAL)
CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
CVSS 3.1 Base Score: 9.8
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade hplip-guiUpgrade libsane-hpaioUpgrade hplipUpgrade hplip-libsUpgrade hplip-common	Jun 17, 2026	Jun 16, 2026
Debian	—	Upgrade hplip	Jul 27, 2026	Jul 27, 2026
Redhat_linux	—	Upgrade libsane-hpaioUpgrade hplipUpgrade hplip-libsUpgrade hplip-guiNo solution existsUpgrade hplip-debuginfoUpgrade hplip-libs-debuginfoUpgrade hplip-debugsourceUpgrade libsane-hpaio-debuginfoUpgrade hplip-common	Jun 18, 2026	May 20, 2026
Rocky_linux	—	Upgrade hplip-libsUpgrade libsane-hpaioUpgrade hplipUpgrade hplip-libs-debuginfoUpgrade hplip-guiUpgrade libsane-hpaio-debuginfoUpgrade hplip-debugsourceUpgrade hplip-commonUpgrade hplip-debuginfo	Jun 18, 2026	Jun 17, 2026
Ubuntu	—	Upgrade hplip	Jun 30, 2026	May 20, 2026

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence