PT-2026-35029 · Openprinting+2 · Cups+2

Tomer-Pl · Published 2026-04-24 · Updated 2026-06-08 · CVE-2026-41079

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions OpenPrinting CUPS versions prior to 2.4.17

Description A network-adjacent attacker can send a crafted SNMP response to the CUPS SNMP backend, leading to an out-of-bounds read of up to 176 bytes past a stack buffer. The leaked memory is converted from UTF-16 to UTF-8 and stored as printer supply description strings. These strings are then visible to authenticated users through the CUPS web interface and IPP Get-Printer-Attributes responses.

Recommendations Update to version 2.4.17.

Exploit

Fix

Information Disclosure

Out of bounds Read

Weakness Enumeration

CWE-200

CWE-125

Related Identifiers

CVE-2026-41079

ECHO-8222-9154-2D64

OESA-2026-2197

OPENSUSE-SU-2026:10820-1

USN-8405-1

Affected Products

Cups

Linuxmint

Ubuntu

References · 23

• 🔥 https://github.com/OpenPrinting/cups/security/advisories/GHSA-6wpw-g8g6-wvrv · Exploit
• https://github.com/OpenPrinting/cups/commit/b7c2525a885f528d243c3a92197ca99609b3f080 · Patch
• https://github.com/OpenPrinting/cups/commit/d7fe0f521ff3b24676511e747b058362b9a20737 · Patch
• https://cve.org/CVERecord?id=CVE-2026-41079 · Security Note
• https://ubuntu.com/security/CVE-2026-39316 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-34990 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-41079 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-34979 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-41079 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8405-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-34980 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-41079 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-39314 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-27447 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10820-1 · Vendor Advisory