CVE-2025-1004

MEDIUM

HP LaserJet Pro Firmware < 2024-10-25 - Denial of Service via IPP Raw JPEG Processing

Title source: llm

Description

Certain HP LaserJet Pro printers may potentially experience a denial of service when a user sends a raw JPEG file to the printer via IPP (Internet Printing Protocol).

References (1)

Core 1

Core References

Various Sources

https://support.hp.com/au-en/document/ish_11927586-11927615-16/hpsbpi03998

Scores

CVSS v3 5.3

EPSS 0.0020

EPSS Percentile 41.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-241

Status published

Products (10)

hp/4pa41a_firmware < 2024-10-25

hp/4pa42a_firmware < 2024-10-25

hp/4pa43a_firmware < 2024-10-25

hp/4pa44a_firmware < 2024-10-25

hp/g3q74a_firmware < 2024-10-25

hp/g3q76a_firmware < 2024-10-25

hp/g3q77a_firmware < 2024-10-25

hp/g3q78a_firmware < 2024-10-25

hp/g3q79a_firmware < 2024-10-25

hp/q3q75a_firmware < 2024-10-25

Published Feb 06, 2025

Tracked Since Feb 18, 2026