{"id":"CVE-2018-5924","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-5924","generatedAt":"2026-10-28T22:20:36.794Z","title":"A security vulnerability has been identified with certain HP Inkjet printers.","description":"A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a stack buffer overflow, which could allow remote code execution.","published":"2018-08-13T15:29:00.000Z","lastModified":"2026-06-17T02:01:02.000Z","status":"Modified","sourceIdentifier":"hp-security-alert@hp.com","cvss":{"version":"3.0","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-787"],"affected":["hp/t8x44 firmware","hp/3aw51a firmware","hp/a9u28b firmware","hp/d3a82a firmware","hp/v1n08a firmware","hp/y5h80a firmware","hp/d4h24b firmware","hp/f5s57a firmware","hp/k4t99b firmware","hp/k4u04b firmware","hp/t8x39 firmware","hp/1sh08 firmware","hp/3aw44a firmware","hp/a9u19a firmware","hp/d3a78b firmware","hp/4uj28b firmware","hp/v1n01a firmware","hp/y5h60a firmware","hp/d4h22a firmware","hp/j6u57b firmware","hp/j9v82a firmware","hp/j9v82b firmware","hp/j9v82c firmware","hp/j9v82d firmware","hp/y3z57 firmware","hp/w1b33 firmware","hp/w1b39 firmware","hp/w1b37 firmware","hp/w1b38 firmware","hp/j6u55a firmware","hp/j6u55b firmware","hp/j6u55c firmware","hp/j6u55d firmware","hp/y3z45 firmware","hp/y3z47 firmware","hp/j9v80a firmware","hp/j9v80b firmware","hp/d3q15a firmware","hp/d3q15b firmware","hp/d3q15d firmware","hp/d3q17a firmware","hp/d3q17c firmware","hp/d3q17d firmware","hp/y3z46 firmware","hp/y3z44 firmware","hp/d3q19a firmware","hp/d3q19d firmware","hp/d3q20a firmware","hp/d3q20b firmware","hp/d3q20c firmware","hp/d3q20d firmware","hp/d3q21a firmware","hp/d3q21c firmware","hp/d3q21d firmware","hp/k9z76a firmware","hp/k9z76d firmware","hp/w1b31 firmware","hp/y3z54 firmware","hp/d3q16a firmware","hp/d3q16b firmware"],"epss":{"score":0.10952,"percentile":0.95863,"date":"2026-10-27","history":[{"date":"2026-09-21","score":0.23007,"percentile":0.97696},{"date":"2026-09-22","score":0.12227,"percentile":0.95985},{"date":"2026-10-18","score":0.10952,"percentile":0.95848}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 11.0%, higher than 96% of all known CVEs. Patch or mitigate before the next change window."},"changes":[{"kind":"epss","label":"EPSS jump","at":"2026-09-21T00:00:00.000Z","detail":{"to":0.23007,"from":0.12227,"percentile":0.97696},"summary":"EPSS moved from 12.2% to 23.0% probability of exploitation in the next thirty days."}],"references":[{"url":"http://www.securityfocus.com/bid/105010","tags":["Third Party Advisory","VDB Entry"],"source":"hp-security-alert@hp.com"},{"url":"http://www.securitytracker.com/id/1041415","tags":["Third Party Advisory","VDB Entry"],"source":"hp-security-alert@hp.com"},{"url":"https://research.checkpoint.com/sending-fax-back-to-the-dark-ages/","tags":["Third Party Advisory"],"source":"hp-security-alert@hp.com"},{"url":"https://support.hp.com/us-en/document/c06097712","tags":["Vendor Advisory"],"source":"hp-security-alert@hp.com"},{"url":"http://www.securityfocus.com/bid/105010","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1041415","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://research.checkpoint.com/sending-fax-back-to-the-dark-ages/","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.hp.com/us-en/document/c06097712","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-5924","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}