Skip to content
Fencer Vulns
medium 5.2

CVE-2019-6337 json

For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert.

published 2019-11-07 7 y ago modified 2026-06-17 4 mo ago also EUVD-2019-15902

cvss
5.2
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 36%
public exploits
0
none known

Summary

For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device.

Patch / fix

  • hp d9l63a_firmware 001.1937c
  • hp d9l64a_firmware 001.1937c
  • hp t0g70a_firmware 001.1937c
  • hp j3p65a_firmware 001.1937c
  • hp j3p68a_firmware 001.1937c
  • hp j6u57a_firmware 001.1937d
  • hp j6u57b_firmware 001.1937d
  • hp j9v80a_firmware 001.1937d
  • hp j9v80b_firmware 001.1937d
  • hp j6u55a_firmware 001.1937d
  • hp j6u55d_firmware 001.1937d
  • hp j6u51b_firmware 001.1937d
  • hp j9v82a_firmware 001.1937d
  • hp j9v82d_firmware 001.1937d
  • hp j9v78b_firmware 001.1937d
  • hp d3q15a_firmware 001.1937d
  • hp d3q15b_firmware 001.1937d
  • hp d3q15d_firmware 001.1937d
  • hp d3q16a_firmware 001.1937d
  • hp d3q16d_firmware 001.1937d

Exploit prediction

0.42% chance of exploitation in the next 30 days, higher than 36% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 5.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
NVD 2.0 3.3 AV:L/AC:M/Au:N/C:P/I:N/A:P

Affected products

  • n/a HP OfficeJet Pro 8210 Printer series,HP PageWide 352dw Printer,HP PageWide 377dw Multifunction Printer,HP PageWide Managed P55250dw Printer series,HP PageWide Managed P57750dw Multifunction Printer series,HP PageWide Managed P52750dw Multifunction Printer,HP PageWide Pro 452dn Printer series,HP PageWide Pro 452dw Printer series,HP PageWide Pro 477dn Multifunction Printer series,HP PageWide Pro 477dw Multifunction Printer series,HP PageWide Pro 552dw Printer series,HP PageWide Pro 577dw Multifunction Printer series

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.