← Vulnerability feed

Vulnerability record · CVE-2025-43023 · published 28 July 2025

CVE-2025-43023: Hp linux imaging and printing improper verification of cryptographic signature vulnerability

Hp · Linux Imaging And Printing

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA).

5.9 CVSS 4.0 Medium EPSS 0.25% · top 85.5% CWE-347 · Improper verification of cryptographic signature
5.9CVSS 4.0 base score
0.25%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA).

CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://support.hp.com/us-en/document/ish_12804224-12804228-16/hpsbpi04033 Vendor Advisory
http://www.openwall.com/lists/oss-security/2025/08/22/4 Mailing ListThird Party Advisory

Track CVE-2025-43023 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2026-91106Hp linux imaging and printing heap-based buffer overflow vulnerabilityHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that coul…EPSS 1.0%9.3CVE-2026-91104Hp linux imaging and printing heap-based buffer overflow vulnerabilityHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that coul…EPSS 1.1%9.3CVE-2026-8631Hp linux imaging and printing heap-based buffer overflow vulnerabilityA potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalati…EPSS 1.1%8.6CVE-2026-91105Hp linux imaging and printing heap-based buffer overflow vulnerabilityHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that coul…EPSS 1.0%8.6CVE-2026-91098Hp linux imaging and printing heap-based buffer overflow vulnerabilityHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that coul…EPSS 1.0%8.5CVE-2026-8632Hp linux imaging and printing command injection vulnerabilityA potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalati…EPSS 4.6%8.4CVE-2026-91102Hp linux imaging and printing os command injection vulnerabilityHP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that coul…EPSS 0.79%8.1CVE-2015-0839Hp linux imaging and printing vulnerabilityThe hp-plugin utility in HP Linux Imaging and Printing (HPLIP) makes it easier for man-in-the-middle attackers to execute arbitrary code by leveragin…EPSS 6.3%

Source: NIST National Vulnerability Database (record CVE-2025-43023), CISA KEV, FIRST EPSS (scores of 2026-10-03). This page is refreshed as NVD updates the record.