CVE-2026-39047

gistfile1.txt

# CVE-2026-39047

## Summary
A buffer overflow vulnerability in the RAW Printing Service (JetDirect/AppSocket) of EPSON L14150 FL27PB allows a remote unauthenticated attacker to trigger memory corruption conditions via crafted network payloads sent to TCP port 9100.

## Affected Product
- EPSON L14150 FL27PB

## Affected Component
- RAW Printing Service
- JetDirect/AppSocket
- TCP/9100

## Attack Vector
Remote, unauthenticated network access via TCP port 9100.

## Impact
Successful exploitation may result in:
- denial of service (DoS)
- parser instability
- abnormal firmware behavior
- potential remote code execution

## Technical Details
The vulnerability exists in the handling of malformed RAW print job payloads processed by the embedded printing parser exposed over TCP/9100.

Specially crafted payloads may trigger unstable parser states and memory corruption conditions within the printer firmware environment.

## Discovery
Discovered and reported by Azhari Ramadhan.

## Disclosure Timeline
- Vulnerability discovered: 2026
- CVE assigned: CVE-2026-39047

## References
- https://github.com/AzhariRamadhan/CVE-2026-39047