CVE-2021-3438

—

CVSS 3.1

7.8 high

EPSS

3%p86

Published

May 20, 2021 (May 20, 2021)

Modified

Jun 17, 2026

Description

A potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could lead to an escalation of privilege.

Vendors: hp samsung
Products: color laser 150 4zb94a, color laser 150 4zb95a, color laser mfp 170 4zb96a, color laser mfp 170 4zb97a, color laser mfp 170 6hu08a, color laser mfp 170 6hu09a, laser 100 209u7a, laser 100 4zb79a, laser 100 4zb80a, laser 100 4zb81a, laser 100 5ue14a, laser 408 7uq75a
Weakness: CWE-120
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.9%)

In the news5 stories

Millions of HP OMEN gaming PCs impacted by CVE-2021

Security AffairsSep 14, 16:25 UTC · Sep 14, 2021Exploit / PoC CVE-2021-3437 CVE-2021-3438

60

Nasty Windows Printer Driver Vulnerability

Schneier on SecurityAug 13, 17:33 UTC · Aug 13, 2021Vulnerability CVE-2021-3438

60

A 16-year-old bug (CVE-2021-3438) in printer driver affects millions of printers worldwide

Security AffairsJul 20, 18:40 UTC · Jul 20, 2021Vulnerability in the wildCVE-2021-3438

60

16-Year-Old Security Bug Affects Millions of HP, Samsung, Xerox Printers

The Hacker NewsJul 20, 11:47 UTC · Jul 20, 2021Vulnerability CVE-2021-3438

60

Hundreds of millions of HP, Xerox, and Samsung printers vulnerable to new bug

The RecordDec 12, 00:00 UTC · Dec 12, 2022Vulnerability CVE-2021-3438

47