A flaw was found in libcupsfilters and cups-filters. The PNG image reading function creates a libpng reader without installing an error recovery handler, causing the CUPS image filter process to abort when processing a malformed PNG file. An unauthenticated attacker could exploit this by submitting a specially crafted PNG print job, leading to denial of service of the in-flight print job.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | Upgrade cups-filters-debugsourceUpgrade cups-filters-debuginfoUpgrade cups-filters-develUpgrade cups-filters-libsUpgrade cups-filtersUpgrade libcupsfiltersUpgrade libcupsfilters-debuginfoUpgrade libcupsfilters-debugsourceUpgrade cups-filters-libs-debuginfoNo solution exists | Jul 22, 2026 | Jun 14, 2026 |
| Rocky_linux | — | Upgrade cups-filters-libsUpgrade cups-filters-develUpgrade cups-filters-libs-debuginfoUpgrade cups-filters-debugsourceUpgrade cups-filters-debuginfoUpgrade cups-filters | Aug 24, 2026 | Aug 21, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub