CVE-2026-87875

Name of the Vulnerable Software and Affected Versions CUPS (affected versions not specified)

Description The cupsUTF32ToUTF8() function in cups/transcode.c lacks a source-length bound, which allows the system to read past the end of the source buffer. This results in a heap out-of-bounds read, a condition where the program reads data outside the intended memory boundary of a heap-allocated buffer. This issue can be triggered through the parsing of SNMP supply-description in backend/snmp-supplies.c using attacker-controlled content.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.