Vulnerability Description
A potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could lead to an escalation of privilege.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Hp | Color Laser 150 4Zb94A | - |
| Hp | Color Laser 150 4Zb95A | - |
| Hp | Color Laser Mfp 170 4Zb96A | - |
| Hp | Color Laser Mfp 170 4Zb97A | - |
| Hp | Color Laser Mfp 170 6Hu08A | - |
| Hp | Color Laser Mfp 170 6Hu09A | - |
| Hp | Laser 100 209U7A | - |
| Hp | Laser 100 4Zb79A | - |
| Hp | Laser 100 4Zb80A | - |
| Hp | Laser 100 4Zb81A | - |
| Hp | Laser 100 5Ue14A | - |
| Hp | Laser 408 7Uq75A | - |
| Hp | Laser Mfp 130 4Zb82A | - |
| Hp | Laser Mfp 130 4Zb83A | - |
| Hp | Laser Mfp 130 4Zb84A | - |
| Hp | Laser Mfp 130 4Zb85A | - |
| Hp | Laser Mfp 130 4Zb86A | - |
| Hp | Laser Mfp 130 4Zb87A | - |
| Hp | Laser Mfp 130 4Zb88A | - |
| Hp | Laser Mfp 130 4Zb89A | - |
Related Weaknesses (CWE)
References
- https://support.hp.com/us-en/document/ish_3900395-3833905-16Vendor Advisory
- https://support.hp.com/us-en/document/ish_3900395-3833905-16Vendor Advisory
FAQ
What is CVE-2021-3438?
CVE-2021-3438 is a vulnerability with a CVSS score of 7.8 (HIGH). A potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could lead to an escalation of privilege.
How severe is CVE-2021-3438?
CVE-2021-3438 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-3438?
Check the references section above for vendor advisories and patch information. Affected products include: Hp Color Laser 150 4Zb94A, Hp Color Laser 150 4Zb95A, Hp Color Laser Mfp 170 4Zb96A, Hp Color Laser Mfp 170 4Zb97A, Hp Color Laser Mfp 170 6Hu08A.