Scanner application crash via unchecked mDNS parsing

Heap and stack buffer overflows in HP HPLIP 3.20.8 and earlier allow attackers to crash scanner applications via crafted mDNS responses. The mdns_readName parser copies attacker-controlled labels into a 256-byte heap buffer without bounds checks, while mdns_update_uris formats untrusted model and IP strings into a fixed stack buffer. The attacker must share the victim's Ethernet or Wi-Fi network and wait for an application such as simple-scan to search for scanners; the published proof of concept crashes the process, while reliable code execution was not demonstrated.