Out-of-bounds read in cups - CVE-2026-41079

Vulnerability identifier: #VU126468

CSH Severity: Low

CVSS v4: 5.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-41079

CWE-ID: CWE-125

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to disclose sensitive information.

The vulnerability exists due to out-of-bounds read in the CUPS SNMP backend when processing crafted SNMP responses during supply-level polling. A remote attacker can send a specially crafted SNMP response to disclose sensitive information.

The leaked memory is converted from UTF-16 to UTF-8 and becomes visible to authenticated users via IPP Get-Printer-Attributes responses and the CUPS web interface. Exploitation requires an SNMP-discovered printer on the same LAN segment.

cups
SUSE Linux Micro
openEuler
Ubuntu
Anolis OS
cups (Ubuntu package)
cups-client
cups-help
cups-filesystem
cups-printerapp
cups-libs
cups
cups-debuginfo
cups-debugsource
cups-devel
cups-lpd
cups-ipptool
cups-doc
libcups2-debuginfo
libcups2
cups-config

Install security update from vendor's website.

cups - update to 2.4.17
cups (Ubuntu package) - addressed in versions 2.4.1op1-1ubuntu4.20, 2.4.1op1-1ubuntu4.21, 2.4.7-1.2ubuntu7.13, 2.4.7-1.2ubuntu7.14, 2.4.12-0ubuntu3.9, 2.4.12-0ubuntu3.10, 2.4.16-1ubuntu1.2, 2.4.16-1ubuntu1.3
cups-client - update to 2.4.7-14
cups-help - update to 2.4.7-14
cups-filesystem - update to 2.4.7-14
cups-printerapp - update to 2.4.7-14
cups-libs - update to 2.4.7-14
cups - update to 2.4.7-14
cups-debuginfo - update to 2.4.7-14
cups-debugsource - update to 2.4.7-14
cups-devel - update to 2.4.7-14
cups-lpd - update to 2.4.7-14
cups-ipptool - update to 2.4.7-14
cups-ipptool - update to 2.4.10-7
cups - update to 2.4.10-7
cups-client - update to 2.4.10-7
cups-filesystem - update to 2.4.10-7
cups-doc - update to 2.4.10-7
cups-printerapp - update to 2.4.10-7
cups-lpd - update to 2.4.10-7
cups-libs - update to 2.4.10-7
cups-devel - update to 2.4.10-7
libcups2-debuginfo - update to 2.4.19-1.1
libcups2 - update to 2.4.19-1.1
cups-config - update to 2.4.19-1.1
cups-debugsource - update to 2.4.19-1.1

• https://github.com/OpenPrinting/cups/security/advisories/GHSA-6wpw-g8g6-wvrv

• Multiple vulnerabilities in cups
• openEuler update for cups
• Anolis OS update for cups
• SUSE update for cups
• Ubuntu update for cups
• Ubuntu update for cups