CVE-2026-34979
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
OpenPrinting CUPS up to version 2.4.16 has a heap-based buffer overflow in the CUPS scheduler when building filter option strings from job attributes. At the time of publication, no public patches are available.
Risk Assessment
A remote attack could lead to arbitrary code execution or crash of the printing service, potentially compromising the entire system.
Recommendation
Monitor for vendor patches and temporarily restrict access to the printing service to trusted users only.
Original NVD description (English source)
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, there is a heap-based buffer overflow in the CUPS scheduler when building filter option strings from job attribute. At time of publication, there are no publicly available patches.