CVE-2019-10627: HP 2dr21d Firmware

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters due to incorrect buffer size calculation. in PostScript and PDF printers that use IPS versions prior to 2019.2 in PostScript and PDF printers that use IPS versions prior to 2019.2

Affected products

• HP 2dr21d Firmware: before 001.1937d (fixed in 001.1937d)
• HP d3q15a Firmware: before 001.1937d (fixed in 001.1937d)
• HP d3q15b Firmware: before 001.1937d (fixed in 001.1937d)
• HP d3q15d Firmware: before 001.1937d (fixed in 001.1937d)
• HP d3q16a Firmware: before 001.1937d (fixed in 001.1937d)
• HP d3q16d Firmware: before 001.1937d (fixed in 001.1937d)
• HP d3q17a Firmware: before 001.1937d (fixed in 001.1937d)
• HP d3q17d Firmware: before 001.1937d (fixed in 001.1937d)
• HP d3q19a Firmware: before 001.1937d (fixed in 001.1937d)
• HP d3q19b Firmware: before 001.1937d (fixed in 001.1937d)
• HP d3q19d Firmware: before 001.1937d (fixed in 001.1937d)
• HP d3q20a Firmware: before 001.1937d (fixed in 001.1937d)
• HP d3q20b Firmware: before 001.1937d (fixed in 001.1937d)
• HP d3q20c Firmware: before 001.1937d (fixed in 001.1937d)
• HP d3q20d Firmware: before 001.1937d (fixed in 001.1937d)
• HP d3q21a Firmware: before 001.1937d (fixed in 001.1937d)
• HP d3q21b Firmware: before 001.1937d (fixed in 001.1937d)
• HP d3q21c Firmware: before 001.1937d (fixed in 001.1937d)
• HP d3q21d Firmware: before 001.1937d (fixed in 001.1937d)
• HP d9l63a Firmware: before 001.1937c (fixed in 001.1937c)
• HP d9l64a Firmware: before 001.1937c (fixed in 001.1937c)
• HP j3p65a Firmware: before 001.1937c (fixed in 001.1937c)
• HP j3p68a Firmware: before 001.1937c (fixed in 001.1937c)
• HP j6u51b Firmware: before 001.1937d (fixed in 001.1937d)
• HP j6u55a Firmware: before 001.1937d (fixed in 001.1937d)
• and 17 more

Published 2019-11-21. Last modified 2026-06-17.