CVE-2026-41079— OpenPrinting CUPS: Heap out-of-bounds read in SNMP supply-level polling leaks stack memory to authenticated users
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-41079
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OpenPrinting CUPS: Heap out-of-bounds read in SNMP supply-level polling leaks stack memory to authenticated users
Source: NVD (National Vulnerability Database)
Vulnerability Description
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.17, a network-adjacent attacker can send a crafted SNMP response to the CUPS SNMP backend that causes an out-of-bounds read of up to 176 bytes past a stack buffer. The leaked memory is converted from UTF-16 to UTF-8 and stored as printer supply description strings, which are subsequently visible to authenticated users via IPP Get-Printer-Attributes responses and the CUPS web interface. This vulnerability is fixed in 2.4.17.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
跨界内存读
Source: NVD (National Vulnerability Database)
Vulnerability Title
OpenPrinting CUPS 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OpenPrinting CUPS是OpenPrinting公司的一个适用于 Linux® 和其他类 Unix® 操作系统的基于标准的开源打印系统。 OpenPrinting CUPS 2.4.17之前版本存在缓冲区错误漏洞，该漏洞源于网络邻近攻击者可发送特制SNMP响应导致栈缓冲区越界读取，泄露的内存被转换为UTF-8并存储为打印机供应描述字符串，随后可通过IPP Get-Printer-Attributes响应和CUPS Web界面被认证用户查看。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| OpenPrinting | cups | < 2.4.17 | - |
II. Public POCs for CVE-2026-41079
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-41079
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same product: cups
- CVE-2026-39316
CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` - CVE-2026-39314
CUPS has an integer underflow in `_ppdCreateFromIPP` causes - CVE-2026-34980
OpenPrinting CUPS: Shared PostScript queue lets anonymous Pr - CVE-2026-34979
OpenPrinting CUPS: Heap overflow in `get_options()` - CVE-2026-34978
OpenPrinting CUPS: Path traversal in RSS notify-recipient-ur
Same vendor: OpenPrinting
- CVE-2026-39316
CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` - CVE-2026-39314
CUPS has an integer underflow in `_ppdCreateFromIPP` causes - CVE-2026-34980
OpenPrinting CUPS: Shared PostScript queue lets anonymous Pr - CVE-2026-34979
OpenPrinting CUPS: Heap overflow in `get_options()` - CVE-2026-34978
OpenPrinting CUPS: Path traversal in RSS notify-recipient-ur
Same weakness: CWE-125
- CVE-2026-8177
XML::LibXML versions through 2.0210 for Perl read out-of-bou - CVE-2026-6104
Global buffer over-read in mb_convert_encoding() with attack - CVE-2026-7258
Out-of-bounds read in urldecode() on NetBSD - CVE-2026-8186
Open5GS NF client.c ogs_sbi_client_send_via_scp_or_sepp out- - CVE-2026-3508
ASUS System Control Interface 缓冲区错误漏洞
V. Comments for CVE-2026-41079
No comments yet