{"cve":"CVE-2018-5925","nvd":{"published":"2018-08-13T15:29:00.373","modified":"2026-06-17T02:01:02.707","status":"Modified","description":"A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a static buffer overflow, which could allow remote code execution.","cvss_v4":null,"cvss_v3":{"version":"3.0","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","score":7.8},"cwes":["CWE-119"],"references":["http://www.securityfocus.com/bid/105010","http://www.securitytracker.com/id/1041415","https://research.checkpoint.com/sending-fax-back-to-the-dark-ages/","https://support.hp.com/us-en/document/c06097712","http://www.securityfocus.com/bid/105010"],"products":["hp:1dt61a_firmware","hp:1jl02a_firmware","hp:1jl02b_firmware","hp:1sh08_firmware","hp:2nd31a_firmware","hp:3aw44a_firmware","hp:3aw51a_firmware","hp:3yz74a_firmware","hp:4sc29a_firmware","hp:4uj28b_firmware","hp:a7f64a_firmware","hp:a7f65a_firmware","hp:a7f66a_firmware","hp:a9j40a_firmware","hp:a9j41_firmware","hp:a9t80a_firmware","hp:a9t80b_firmware","hp:a9t89a_firmware","hp:a9u19a_firmware","hp:a9u23_firmware","hp:a9u28b_firmware","hp:b4l03_firmware","hp:b4l08a_firmware","hp:b9s56a_firmware","hp:b9s57c_firmware","hp:b9s58a_firmware","hp:b9s76_firmware","hp:c9s13a_firmware","hp:cm749a_firmware","hp:cm750a_firmware","hp:cn216a_firmware","hp:cn459a_firmware","hp:cn460a_firmware","hp:cn461a_firmware","hp:cn463a_firmware","hp:cn577a_firmware","hp:cn581a_firmware","hp:cn583a_firmware","hp:cn598a_firmware","hp:cq176_firmware","hp:cq176a_firmware","hp:cq183a_firmware","hp:cq761a_firmware","hp:cq890a_firmware","hp:cq890ar_firmware","hp:cq890b_firmware","hp:cq890c_firmware","hp:cq890d_firmware","hp:cq890e_firmware","hp:cq891a_firmware"],"source":"nvd","synced_at":"2026-10-19T20:52:03.425131697+00:00"},"epss":{"cve":"CVE-2018-5925","score":0.09745,"percentile":0.95524,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}