CVE-2025-26507
Published: 14 February 2025
Summary
CVE-2025-26507 is a medium-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Hp Futuresmart 5. Its CVSS base score is 6.3 (Medium).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 14.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-2 (Flaw Remediation) and SC-7 (Boundary Protection).
Deeper analysis
Certain HP LaserJet Pro, Enterprise, and Managed Printers are affected by CVE-2025-26507, a vulnerability that can lead to remote code execution and elevation of privilege during PostScript print job processing. The issue is tracked under CWE-121 and carries a CVSS 4.0 score of 6.3 with a network attack vector, high attack complexity, and no required privileges or user interaction.
An unauthenticated remote attacker can submit a specially crafted PostScript job to an exposed printer, potentially executing arbitrary code and gaining elevated privileges on the device. The attack requires the printer to accept and process PostScript input over the network.
HP has published mitigation guidance in security bulletin HPSBPI04007, available at the referenced support document. The EPSS score rose from a low baseline to a peak of 0.0609 before receding to the current value of 0.0245, indicating a temporary increase in observed exploitation interest after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-4203
Vulnerability details
Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
The CVE describes unauthenticated network-accessible RCE via malicious PostScript print job exploiting a buffer overflow, directly enabling exploitation of public-facing/remote services for initial access and privilege escalation on the device.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly mandates timely identification, reporting, and remediation of the buffer overflow flaw via firmware patching as specified in HP's security bulletin.
Monitors and controls network communications at boundaries to block unauthenticated remote PostScript print jobs targeting vulnerable printers.
Implements memory protection mechanisms such as non-executable stacks to mitigate remote code execution from the PostScript buffer overflow.