CVE-2026-64611

HighCVSS 7.5

Published: 23/07/2026(UTC)Updated: 19/08/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.34%

27th percentile - higher than 27% of all known CVEs

Summary

In the libcupsfilters library, the cfIEEE1284NormalizeMakeModel() function enters an infinite loop when processing an IEEE-1284 device ID with an empty model field. A network-adjacent attacker can broadcast a crafted printer advertisement, causing denial of service.

Risk Assessment

The organization is at risk of a DoS attack on print servers, potentially preventing printing and causing CPU overload.

Recommendation

Update libcupsfilters to a patched version or apply the available fix.

Other vulnerabilities in libcupsfilters

CVE-2026-64612High
The libcupsfilters and cups-filters libraries lack an error recovery handler when reading PNG files. An attacker can send a crafted PNG print job, causing the print job processing to abort.

Original NVD description (English source)

A flaw was found in libcupsfilters. The cfIEEE1284NormalizeMakeModel() function enters an infinite loop when processing a printer-advertised IEEE-1284 device ID with an empty model field, causing sustained CPU consumption. A network-adjacent attacker could exploit this by broadcasting a specially crafted printer advertisement, leading to denial of service.