HP d9l63a Firmware vulnerabilities

8 CVEs affecting HP d9l63a Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-1997, published 2026-02-10.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-2741, published 2018-01-23. Critical severity, CVSS 9.8. EPSS: 84.6% chance of exploitation in the next 30 days. A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D. This vulnerability could potentially be exploited to execute…
• CVE-2018-5924, published 2018-08-13. Critical severity, CVSS 9.8. EPSS: 12.2% chance of exploitation in the next 30 days. A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a stack buffer overflow, which could allow remote code…
• CVE-2018-5925, published 2018-08-13. High severity, CVSS 7.8. EPSS: 10.9% chance of exploitation in the next 30 days. A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a static buffer overflow, which could allow remote code…
• CVE-2022-28721, published 2022-09-26. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. Certain HP Print Products are potentially vulnerable to Remote Code Execution.
• CVE-2019-10627, published 2019-11-21. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters due to incorrect buffer size calculation. in PostScript and…
• CVE-2022-28722, published 2022-09-26. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. Certain HP Print Products are potentially vulnerable to Buffer Overflow.
• CVE-2019-6337, published 2019-11-07. Medium severity, CVSS 5.2. EPSS: 0.4% chance of exploitation in the next 30 days. For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device.
• CVE-2026-1997, published 2026-02-10. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. Certain HP OfficeJet Pro printers may expose information if Cross‑Origin Resource Sharing (CORS) is misconfigured, potentially allowing unauthorized web origins to access device resource. CORS is…