Skip to content
Openprinting Cups vulnerabilities
-
openprinting cups
OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group...
CVE-2026-107890
Fix available
3.3 Low
-
openprinting cups
OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a...
CVE-2026-107888
Fix available
5.1 Medium
-
openprinting cups
OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add...
CVE-2026-107886
Fix available
2.3 Low
-
openprinting cups
OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission...
CVE-2026-107885
Fix available
3.3 Low
-
openprinting cups
CUPS fax option values bypass the CVE-2026-34980 control-character sanitizer (incomplete fix)
CVE-2026-55467
Fix available
2.5 Low
-
openprinting cups
OpenPrinting CUPS: root-side banner file disclosure
CVE-2026-61702
Fix available
5.3 Medium
-
openprinting cups
CUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root)
CVE-2026-55480
Fix available
5.7 Medium
-
openprinting cups
CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip
CVE-2026-55453
Fix available
3.3 Low
-
openprinting cups
OpenPrinting CUPS: Heap out-of-bounds read in SNMP supply-level polling leaks stack memory to authenticated users
CVE-2026-41079
Fix available
4.3 Medium
-
openprinting cups
CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointer
CVE-2026-39316
Fix available
4.0 Medium
-
openprinting cups
CUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported`
CVE-2026-39314
Fix available
4.0 Medium
-
openprinting cups
OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network
CVE-2026-34980
Public exploitFix available
6.1 Medium
-
openprinting cups
OpenPrinting CUPS: Heap overflow in `get_options()`
CVE-2026-34979
Fix available
5.3 Medium
-
openprinting cups
OpenPrinting CUPS: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (and clobbering of job.cache)
CVE-2026-34978
Fix available
6.5 Medium
-
openprinting cups
OpenPrinting CUPS: Local print admin token disclosure using temporary printers
CVE-2026-34990
Public exploitFix available
5.0 Medium
-
openprinting cups
OpenPrinting CUPS: Authorization bypass via case-insensitive group-member lookup
CVE-2026-27447
Fix available
4.8 Medium
-
openprinting cups
OpenPrinting CUPS vulnerable to stack based out-of-bound write
CVE-2025-61915
Fix available
6.0 Medium
-
openprinting cups
OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack
CVE-2025-58436
Fix available
5.1 Medium
-
openprinting cups-filters
CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code Execution
CVE-2025-64524
Fix available
3.3 Low
-
openprinting cups-filters, libcupsfilters +1 more
[BIGSLEEP-434615384] cups-filters 1.x: out of bounds write in pdftoraster
CVE-2025-64503
Fix available
4.0 Medium
-
openprinting cups-filters, libcupsfilters +1 more
[BIGSLEEP-434612419] CUPS-Filters has heap-buffer-overflow write in `cfImageLut()`
CVE-2025-57812
Fix available
3.7 Low
-
openprinting cups
cups: Remote DoS via null dereference
CVE-2025-58364
Fix available
6.5 Medium
-
openprinting cups
cups has Authentication bypass with AuthType Negotiate
CVE-2025-58060
Public exploitFix available
8.0 High
-
openprinting libcupsfilters
libcupsfilters's cfGetPrinterAttributes5 does not validate IPP attributes returned from an IPP server
CVE-2024-47076
Public exploitFix available
EPSS 79.9%
8.6 High
-
openprinting cups, cups-browsed +1 more
cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source
CVE-2024-47176
Public exploitFix available
EPSS 50.6%
5.3 Medium
-
debian linux, openprinting cups +1 more
Cupsd Listen arbitrary chmod 0140777
CVE-2024-35235
Fix available
4.4 Medium
-
openprinting cups, libppd, debian linux +1 more +3 more
OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow
CVE-2023-4504
Public exploitFix available
7.0 High
-
debian linux, openprinting cups, apple macos +1 more +3 more
CUPS vulnerable to use-after-free in cupsdAcceptClient()
CVE-2023-34241
Fix available
5.3 Medium
-
openprinting cups, debian linux +1 more
OpenPrinting CUPS vulnerable to heap buffer overflow
CVE-2023-32324
Fix available
7.5 High
-
linuxfoundation cups-filters, debian linux, fedoraproject fedora +2 more
Command injection in cups-filters
CVE-2023-24805
Fix available
8.8 High
-
apple macos, cups, mac os x +2 more +4 more
A logic issue was addressed with improved state management. This issue is fixed in Security...
CVE-2022-26691
Fix available
6.7 Medium
-
apple cups, debian linux +1 more
cups (Common Unix Printing System) 'Listen localhost:631' option not honored correctly which...
CVE-2012-6094
9.8 Critical
-
apple cups
The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing...
CVE-2018-4300
Fix available
5.9 Medium
-
cups, canonical ubuntu linux, debian linux +2 more
AppArmor cupsd Sandbox Bypass Due to Use of Hard Links
CVE-2018-6553
Fix available
8.8 High