CVE-2026-34979CWE-122

OpenPrinting CUPS: Heap overflow in `get_options()`

Medium · published April 3, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
34.5
In the wild
Unconfirmed
What it is

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, there is a heap-based buffer overflow in the CUPS scheduler when building filter option strings from job attribute. At time of publication, there are no publicly available patches.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00413 · 34.5th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2026-04-03T21:16Z
EPSS history
Timeline
  • 03 APR 21:16Z
    OpenPrinting CUPS: Heap overflow in `get_options()`
    cvelistv5