Out-of-bounds read in cups - #VU154071
Published: October 12, 2026
Vulnerability identifier: #VU154071
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-125
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause a persistent denial of service.
The vulnerability exists due to an out-of-bounds read in cupsdLogJob() when logging a persisted job with an out-of-range job-state value. A local user can submit a Print-Job or Create-Job request containing duplicate job-state attributes to cause a persistent denial of service.
Exploitation requires an existing print queue and a systemd-journal build configured with ErrorLog syslog or PageLog syslog. The crash is triggered when the scheduler next reloads or restarts.
Affected software
cups
Remediation
Install security update from vendor's website.
cups - update to 2.4.20