CVE-2026-8631 HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution

Critical 9.3 Published 20 May 2026 Updated 4 Aug 2026

Attackers can achieve arbitrary code execution and privilege escalation via integer overflow in HP Linux Imaging and Printing Software when processing crafted print data.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2026-8631?

CVE-2026-8631 is a critical vulnerability in HP Linux Imaging and Printing Software, published on 20 May 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when handling crafted print data.

Weakness: CWE-190, CWE-122

Which versions are affected by CVE-2026-8631?

It affects 1 product.

Products include Hp Linux Imaging and Printing.

How do I fix CVE-2026-8631?

Apply the vendor's patch.

Is CVE-2026-8631 being exploited?

There is no known exploitation of CVE-2026-8631 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2026-8631, GHSA-hcc9-h975-pvc2, UBUNTU-CVE-2026-8631.