Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-87875

Опубликовано: 09 сент. 2026
Источник: redhat
CVSS3: 4.3
EPSS Низкий

Описание

The cupsUTF32ToUTF8() function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content.

Меры по смягчению последствий

Fixed on upstream master branch with commit 0c6842f and for versions 2.4.x with commit 2b1dc17.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 10cupsFix deferred
Red Hat Enterprise Linux 6cupsFix deferred
Red Hat Enterprise Linux 7cupsFix deferred
Red Hat Enterprise Linux 8cupsFix deferred
Red Hat Enterprise Linux 9cupsFix deferred
Red Hat Enterprise Linux 9rhel9/cupsFix deferred
Red Hat OpenShift Container Platform 4rhcos/rhcosFix deferred
Red Hat Hardened Imagescups-main-2.4.19-4.1.hum1FixedRHSA-2026:6660011.09.2026

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=2530994cups: OpenPrinting CUPS: Heap out-of-bounds read in cupsUTF32ToUTF8() via missing source-length bound

EPSS

Процентиль: 25%
0.00324
Низкий

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.3
ubuntu
6 дней назад

(The cupsUTF32ToUTF8() function in CUPS's cups/transcode.c lacks a sour ...)

CVSS3: 4.3
nvd
6 дней назад

The cupsUTF32ToUTF8() function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content.

CVSS3: 4.3
debian
6 дней назад

The cupsUTF32ToUTF8() function in CUPS's cups/transcode.c lacks a sour ...

EPSS

Процентиль: 25%
0.00324
Низкий

4.3 Medium

CVSS3