CVE-2019-10627

highpriority · track · 39EPSS 0.014 · 71 %ileEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

1.35% (71st) EPSS

CVSS 7.5 · high

Is it mine?

57 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

EPSS · scored 2026-10-28

Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters due to incorrect buffer size calculation. in PostScript and PDF printers that use IPS versions prior to 2019.2 in PostScript and PDF printers that use IPS versions prior to 2019.2

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 7.5–9.8

v2.07.5highAV:N/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 10 · impact 6.4

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9

v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-119USprimaryCWE-131USprimaryCWE-190USprimaryCWE-190US

affected products (57)

Products and version ranges known to be affected.

Qualcomm, Inc. PostScript and PDF printers that use IPS versions prior to 2019.2≤ PostScript and PDF printers that use IPS versions prior to 2019.2enisa_euvdEU
HP Inc. HP OfficeJet Pro 8210 (D9L63A - D9L64A, T0G70A, J3P65A - J3P68A)≤ 001.1937Cfstec_bduRU
HP Inc. HP PageWide 352dw (J6U57A - J6U57B)≤ 001.1937Dfstec_bduRU
HP Inc. HP PageWide 377dw (J9V80A, J9V80B)≤ 001.1937Dfstec_bduRU
HP Inc. HP PageWide Managed P52750dw (J9V82A - J9V82D, J9V78B)≤ 001.1937Dfstec_bduRU
HP Inc. HP PageWide Managed P55250dw (J6U55A - J6U55D, J6U51B)≤ 001.1937Dfstec_bduRU
HP Inc. HP PageWide Managed P57750dw (J9V82A - J9V82D, J9V78B)≤ 001.1937Dfstec_bduRU
HP Inc. HP PageWide Pro 452dn (D3Q15A, D3Q15B, D3Q15D)≤ 001.1937Dfstec_bduRU
HP Inc. HP PageWide Pro 452dw (D3Q16A - D3Q16D, W2Z52B)≤ 001.1937Dfstec_bduRU
HP Inc. HP PageWide Pro 477dn (D3Q19A, D3Q19B, D3Q19D)≤ 001.1937Dfstec_bduRU
HP Inc. HP PageWide Pro 477dw (D3Q20A, D3Q20B, D3Q20C, D3Q20D, W2Z53B)≤ 001.1937Dfstec_bduRU
HP Inc. HP PageWide Pro 552dw (2DR21D, D3Q17A - D3Q17D, K9Z74A - K9Z74D)≤ 001.1937Dfstec_bduRU
HP Inc. HP PageWide Pro 577dw (D3Q21A,D3Q21B, D3Q21C, D3Q21D)≤ 001.1937Dfstec_bduRU
HP Inc. HP PageWide Pro 577z (K9Z76A, K9Z76B, K9Z76D)≤ 001.1937Dfstec_bduRU
Qualcomm Technologies Inc. IPS≤ 2019.2fstec_bduRU
hp 2dr21d firmware< 001.1937dnvdUScpe:2.3:o:hp:2dr21d_firmware:*:*:*:*:*:*:*:*
hp d3q15a firmware< 001.1937dnvdUScpe:2.3:o:hp:d3q15a_firmware:*:*:*:*:*:*:*:*
hp d3q15b firmware< 001.1937dnvdUScpe:2.3:o:hp:d3q15b_firmware:*:*:*:*:*:*:*:*
hp d3q15d firmware< 001.1937dnvdUScpe:2.3:o:hp:d3q15d_firmware:*:*:*:*:*:*:*:*
hp d3q16a firmware< 001.1937dnvdUScpe:2.3:o:hp:d3q16a_firmware:*:*:*:*:*:*:*:*

showing 20 of 57

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu nvd NVD CVE.org MITRE

published 2019-11-21modified 2026-06-17

related (25,843)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-88779US	high7.5OT critical	11.4% (96th)	KEV	2026-10-04
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before…
CVE-2026-88772US	high8.1OT critical	78.2% (100th)	KEV	2026-09-27
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FI…
CVE-2026-8452US	critical9.8OT critical	1.01% (63rd)	KEV	2026-06-30
Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (…
CVE-2026-53266US	—OT critical	0.93% (61st)	KEV	2026-06-25
In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The ebtables SNAT target keeps the Ethernet source addre…
CVE-2025-48595US	—OT critical	1.95% (80th)	KEV	2026-06-01
In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution p…

+25838 more

references (7)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan