Out-of-bounds read in cups - CVE-2026-41079

Vulnerability identifier: #VU126468

CSH Severity: Low

CVSS v4: 5.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-41079

CWE-ID: CWE-125

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to disclose sensitive information.

The vulnerability exists due to out-of-bounds read in the CUPS SNMP backend when processing crafted SNMP responses during supply-level polling. A remote attacker can send a specially crafted SNMP response to disclose sensitive information.

The leaked memory is converted from UTF-16 to UTF-8 and becomes visible to authenticated users via IPP Get-Printer-Attributes responses and the CUPS web interface. Exploitation requires an SNMP-discovered printer on the same LAN segment.

cups
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Micro
openEuler
Ubuntu
Anolis OS
cups-client-debuginfo
cups-debugsource
cups
cups-devel
cups-client
cups-libs-32bit
cups-libs-debuginfo-32bit
cups-libs
cups-libs-debuginfo
cups-debuginfo
cups (Ubuntu package)
cups-ipptool
cups-lpd
cups-printerapp
cups-filesystem
cups-help
cups-doc
cups-config
libcups2
libcups2-debuginfo

Install security update from vendor's website.

cups - update to 2.4.17
cups-client-debuginfo - update to 1.7.5-20.73.1
cups-debugsource - addressed in versions 1.7.5-20.73.1, 2.4.19-1.1
cups - update to 1.7.5-20.73.1
cups-devel - update to 1.7.5-20.73.1
cups-client - update to 1.7.5-20.73.1
cups-libs-32bit - update to 1.7.5-20.73.1
cups-libs-debuginfo-32bit - update to 1.7.5-20.73.1
cups-libs - update to 1.7.5-20.73.1
cups-libs-debuginfo - update to 1.7.5-20.73.1
cups-debuginfo - update to 1.7.5-20.73.1
cups (Ubuntu package) - addressed in versions 2.4.1op1-1ubuntu4.20, 2.4.1op1-1ubuntu4.21, 2.4.7-1.2ubuntu7.13, 2.4.7-1.2ubuntu7.14, 2.4.12-0ubuntu3.9, 2.4.12-0ubuntu3.10, 2.4.16-1ubuntu1.2, 2.4.16-1ubuntu1.3
cups-client - update to 2.4.7-14
cups - update to 2.4.7-14
cups-debuginfo - update to 2.4.7-14
cups-debugsource - update to 2.4.7-14
cups-devel - update to 2.4.7-14
cups-ipptool - update to 2.4.7-14
cups-libs - update to 2.4.7-14
cups-lpd - update to 2.4.7-14
cups-printerapp - update to 2.4.7-14
cups-filesystem - update to 2.4.7-14
cups-help - update to 2.4.7-14
cups-lpd - update to 2.4.10-7
cups - update to 2.4.10-7
cups-client - update to 2.4.10-7
cups-devel - update to 2.4.10-7
cups-ipptool - update to 2.4.10-7
cups-filesystem - update to 2.4.10-7
cups-doc - update to 2.4.10-7
cups-printerapp - update to 2.4.10-7
cups-libs - update to 2.4.10-7
cups-config - update to 2.4.19-1.1
libcups2 - update to 2.4.19-1.1
libcups2-debuginfo - update to 2.4.19-1.1

• https://github.com/OpenPrinting/cups/security/advisories/GHSA-6wpw-g8g6-wvrv

• Multiple vulnerabilities in cups
• openEuler update for cups
• Anolis OS update for cups
• SUSE update for cups
• Ubuntu update for cups
• Ubuntu update for cups
• SUSE update for cups