CVE-2026-14544 | A flaw was found in HPLIP (HP Linux Imaging and Printing Sof… | CVSS 9.8 CRITICAL

Description

A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in the hpcups processing path when handling specially crafted print data.

Metadata

CVE ID: CVE-2026-14544
State: PUBLISHED
Assigner: redhat
Reserved: 2026-07-03 07:06 UTC
Published: 2026-07-03 07:26 UTC
Last updated: 2026-07-16 11:47 UTC
Primary CWE: CWE-190
Integer Overflow or Wraparound
Vendor / Product: Red Hat / Red Hat Enterprise Linux 10
Sources: cve.org · NVD

Severity & Metrics

9.8 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: none
Automatable: yes
Tech. Impact: total

Affected products (5)

Vendor	Product	Platform	Versions
Red Hat	Red Hat Enterprise Linux 10	—	0:3.23.12-10.el10_2.5 < *
Red Hat	Red Hat Enterprise Linux 6	—	—
Red Hat	Red Hat Enterprise Linux 7	—	—
Red Hat	Red Hat Enterprise Linux 8	—	0:3.18.4-14.el8_10 < *
Red Hat	Red Hat Enterprise Linux 9	—	0:3.21.2-6.el9_8.5 < *

Weakness (CWE)

CWE	Source	Description
CWE-190	cna	Integer Overflow or Wraparound

CVSS scores (1)

Score	Severity	Version	Source	Vector
9.8	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References (5)

RHSA-2026:39976 https://access.redhat.com/errata/RHSA-2026:39976
RHSA-2026:40831 https://access.redhat.com/errata/RHSA-2026:40831
RHSA-2026:40894 https://access.redhat.com/errata/RHSA-2026:40894
https://access.redhat.com/security/cve/CVE-2026-14544
RHBZ#2496772 https://bugzilla.redhat.com/show_bug.cgi?id=2496772