Threats affecting pkg:deb/hp/hplip

CVE-2026-91103 is an integer underflow vulnerability (CWE-191) in HP Linux Imaging and Printing Software (HPLIP) versions before 3.26.6. HP has identified and fixed multiple vulnerabilities in HPLIP that could allow remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions. The CVSS 4.0 base score is 5.1, indicating a medium severity level.

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.

CVE-2026-91097 is a high-severity vulnerability in HP Linux Imaging and Printing Software (HPLIP) involving an out-of-bounds write (CWE-787). This flaw affects versions prior to 3.26.6 and could allow remote attackers to cause denial of service, escalate privileges, execute code remotely, disclose information, or modify files without authorization under certain conditions. HP has identified and remediated this and other vulnerabilities in HPLIP. No known exploits are reported in the wild at this time.