CVE-2026-41079: OpenPrinting CUPS: Heap out-of-bounds read in SNMP supply-level polling leaks stack memory to authenticated users
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.17, a network-adjacent attacker can send a crafted SNMP response to the CUPS SNMP backend that causes an out-of-bounds read of up to 176 bytes past a stack buffer. The leaked memory is converted from UTF-16 to UTF-8 and stored as printer supply description strings, which are subsequently visible to authenticated users via IPP Get-Printer-Attributes responses and the CUPS web interface. This vulnerability is fixed in 2.4.17.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-41079?
CVE-2026-41079 has a medium severity level due to the potential for leakage of sensitive information to authenticated users.
How do I fix CVE-2026-41079?
To fix CVE-2026-41079, upgrade to OpenPrinting CUPS version 2.4.17 or later.
Who is affected by CVE-2026-41079?
CVE-2026-41079 affects versions of OpenPrinting CUPS prior to 2.4.17.
What type of vulnerability is CVE-2026-41079?
CVE-2026-41079 is classified as a heap out-of-bounds read vulnerability.
Can CVE-2026-41079 be exploited remotely?
Yes, a network-adjacent attacker can exploit CVE-2026-41079 by sending a crafted SNMP response.