Cyber Resilience

CVE-2025-43025

Medium

Published: 02 July 2025

Published
02 July 2025
Modified
20 January 2026
KEV Added
—
Patch
—
CVSS Score v4 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0030 53.6th percentile
Risk Priority 10 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-43025 is a medium-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Hp Universal Print Driver. Its CVSS base score is 4.8 (Medium).

Operationally, ranked in the top 46.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

HP Universal Print Driver is potentially vulnerable to denial of service due to buffer overflow in versions of UPD 7.4 or older (e.g., v7.3.x, v7.2.x, v7.1.x, etc.).

CWE(s)
CWE-121

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

hp
universal print driver
≤ 61.330.01.26178

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References