NVD - CVE-2026-8631 (original) (raw)

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL Source(s) Tag(s)
https://support.hp.com/us-en/document/ish_14942099-14942126-16/hpsbpi04118 HP Inc. Vendor Advisory

Change History

4 change records found show changes

CVE Modified by CISA-ADP 6/17/2026 7:04:14 AM

Action Type Old Value New Value
Added SSVC {"timestamp":"2026-05-21T03:55:54.973002Z","id":"CVE-2026-8631","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

CVE Modified by HP Inc. 6/17/2026 7:04:14 AM

Action Type Old Value New Value
Added Affected [{"vendor":"HP Inc","product":"HP Linux Imaging and Printing Software","defaultStatus":"affected","platforms":["Linux"],"versions":[{"version":"0","lessThan":"3.26.4","versionType":"custom","status":"affected"}]}]

Initial Analysis by NIST 5/21/2026 2:58:41 PM

Action Type Old Value New Value
Added CVSS V3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Added CWE CWE-190
Added CPE Configuration OR *cpe:2.3:a:hp:linux_imaging_and_printing:*:*:*:*:*:*:*:* versions up to (excluding) 3.26.4
Added Reference Type HP Inc.: https://support.hp.com/us-en/document/ish\_14942099-14942126-16/hpsbpi04118 Types: Vendor Advisory

New CVE Received from HP Inc. 5/20/2026 5:16:18 PM

Action Type Old Value New Value
Added Description A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print data.
Added CVSS V4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Added CWE CWE-122
Added Reference https://support.hp.com/us-en/document/ish\_14942099-14942126-16/hpsbpi04118