CVE-2026-41079

Name of the Vulnerable Software and Affected Versions OpenPrinting CUPS versions prior to 2.4.17

Description A network-adjacent attacker can send a crafted SNMP response to the CUPS SNMP backend, leading to an out-of-bounds read of up to 176 bytes past a stack buffer. The leaked memory is converted from UTF-16 to UTF-8 and stored as printer supply description strings. These strings are then visible to authenticated users through the CUPS web interface and IPP Get-Printer-Attributes responses.

Recommendations Update to version 2.4.17.