The vulnerability is an integer overflow in the hpcups processing path that can be triggered by crafted print data. An attacker who can direct such data to the vulnerable print service may gain elevated privileges on the host or execute code with the permissions of the printing daemon. This results in a serious loss of confidentiality, integrity, and availability for the affected system.

The HP Linux Imaging and Printing Software running on Linux operating systems is the affected product. No specific version numbers are listed, so all installations of this software are potentially impacted until a patch is applied.

The CVSS score of 9.3 indicates a critical severity. The EPSS score of 0.00022 (< 1%) indicates a very low probability of exploitation, though the lack of a KEV listing does not diminish the risk. The flaw can be exploited through the print service, which is typically accessible over the local network, making remote or local exploitation plausible depending on the system’s network configuration. If an attacker can send crafted print jobs, they can trigger the integer overflow and control code execution.