This vulnerability (CVE-2026-91103) is classified as CWE-191, an integer underflow (wrap or wraparound) in HP Linux Imaging and Printing Software (HPLIP). It affects versions from 0 up to but not including 3.26.6. The issue could potentially be exploited to achieve remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification. The CVSS 4.0 vector indicates the attack requires physical access (AV:P), low attack complexity, no privileges, no user interaction, and results in high impact on availability. HP has published this vulnerability and remediated it in version 3.26.6.

The vulnerability can lead to multiple serious impacts including remote code execution, privilege escalation, denial of service, information disclosure, and unauthorized file modification. The CVSS score of 5.1 (medium severity) reflects these potential impacts. Exploitation requires physical access to the vulnerable system. There are no known exploits in the wild at this time.

HP has remediated this vulnerability in HP Linux Imaging and Printing Software version 3.26.6. Users should upgrade to version 3.26.6 or later to address this issue. No additional mitigation steps are indicated by the vendor advisory.