CVE-2025-61915: OpenPrinting CUPS vulnerable to stack based out-of-bound write
A user in group defined by SystemGroup directive in /etc/cups/cups-files.conf can use the cups web ui to change the config and insert a malicious line. Then the cupsd process which runs as root will parse the new config and cause an out-of-bound write.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-61915?
CVE-2025-61915 has a high severity rating as it allows a user in the lpadmin group to potentially execute arbitrary code as root.
How do I fix CVE-2025-61915?
To fix CVE-2025-61915, upgrade to OpenPrinting CUPS version 2.4.15 or later.
Who is affected by CVE-2025-61915?
CVE-2025-61915 affects users of OpenPrinting CUPS prior to version 2.4.15, specifically those in the lpadmin group.
What actions can a malicious user take with CVE-2025-61915?
A malicious user can modify the CUPS configuration via the web UI to execute arbitrary commands as the root user.
Is there a workaround for CVE-2025-61915 before upgrading?
Disabling access to the CUPS web interface or restricting lpadmin group membership can serve as a temporary workaround for CVE-2025-61915.