CVE-2021-3438
A potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could lead to an escalation of privilege.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.90%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could lead to an escalation of privilege.
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 2.90% probability · 87th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-120
- Affected
- hp/color laser 150 4zb94a · hp/color laser 150 4zb95a · hp/color laser mfp 170 4zb96a · hp/color laser mfp 170 4zb97a · hp/color laser mfp 170 6hu08a · hp/color laser mfp 170 6hu09a · hp/laser 100 209u7a · hp/laser 100 4zb79a · hp/laser 100 4zb80a · hp/laser 100 4zb81a · hp/laser 100 5ue14a · hp/laser 408 7uq75a · hp/laser mfp 130 4zb82a · hp/laser mfp 130 4zb83a · hp/laser mfp 130 4zb84a · hp/laser mfp 130 4zb85a · hp/laser mfp 130 4zb86a · hp/laser mfp 130 4zb87a · hp/laser mfp 130 4zb88a · hp/laser mfp 130 4zb89a · +40 more
- Source
- hp-security-alert@hp.com
EPSS 2.9% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- https://support.hp.com/us-en/document/ish_3900395-3833905-16Vendor Advisory
- https://support.hp.com/us-en/document/ish_3900395-3833905-16Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.