CVE-2022-28722 Memory corruption in Certain HP inkjet printers, HP LaserJet Pro printers, HP PageWide Pro printers
A buffer overflow in HP printers allows attackers to execute arbitrary code or cause a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-28722?
CVE-2022-28722 is a critical memory corruption vulnerability in Certain HP inkjet printers, HP LaserJet Pro printers, HP PageWide Pro printers, published on 26 Sep 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Certain HP Print Products are potentially vulnerable to Buffer Overflow.
Weakness: CWE-120
Which versions are affected by CVE-2022-28722?
It affects 99 products.
Products include Hp A7w93a Firmware, Hp D3q15a Firmware, Hp D3q16a Firmware, Hp D3q17a Firmware, Hp D3q19a Firmware, Hp D3q20a Firmware and 93 more.
How do I fix CVE-2022-28722?
No fix has been published for CVE-2022-28722 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2022-28722 being exploited?
There is no known exploitation of CVE-2022-28722 in the wild and no public exploit code.
Sources
Also known as GHSA-c7hw-4mfg-h77v.