HP DeskJet All-in-One Devices Buffer Overflow Vulnerability in Web Services for Devices Scanning Protocol Allowing Remote Code Execution

A buffer overflow vulnerability has been identified in certain HP DeskJet All-in-One devices. This issue may allow remote code execution when Web Services for Devices (WSD) scan requests are improperly validated and managed. WSD is a Microsoft Windows-based protocol that enables PCs to discover scanners and multifunction printers (MFPs) on a network and send scan jobs to them without needing vendor-specific drivers or utilities.

Impact

Exploitation of this vulnerability could lead to remote code execution on the affected device.