https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:10:14 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-367185 EUVD-2026-367185 https://cve.radiocsirt.org/vuln/euvd-2026-367185 https://cve.radiocsirt.org/vuln/fkie_cve-2026-87875 <p>The cupsUTF32ToUTF8() function in CUPS&#39;s cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content.</p> <p>The cupsUTF32ToUTF8() function in CUPS&#39;s cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-87875 https://cve.radiocsirt.org/vuln/msrc_cve-2026-87875 msrc_CVE-2026-87875 https://cve.radiocsirt.org/vuln/msrc_cve-2026-87875 https://cve.radiocsirt.org/vuln/oesa-2026-4138 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP3: cups</p> <p>CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol (IPP) to support printing to local and network printers.. Security Fix(es):</p> <p>The cupsUTF32ToUTF8() function in CUPS&amp;apos;s cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content.(CVE-2026-87875)</p> <p>Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS&amp;apos;s scheduler (printer ACL validation and private-attribute filtering) could allow bypass of username-based access controls in certain configurations.(CVE-2026-87876)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP3: cups</p> <p>CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol (IPP) to support printing to local and network printers.. Security Fix(es):</p> <p>The cupsUTF32ToUTF8() function in CUPS&amp;apos;s cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content.(CVE-2026-87875)</p> <p>Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS&amp;apos;s scheduler (printer ACL validation and private-attribute filtering) could allow bypass of username-based access controls in certain configurations.(CVE-2026-87876)</p> https://cve.radiocsirt.org/vuln/oesa-2026-4138 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11785-1 <p>cups-2.4.19-3.1 on GA media</p> <p>cups-2.4.19-3.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11785-1 https://cve.radiocsirt.org/vuln/rhsa-2026:66600 <p>cups: OpenPrinting CUPS: Heap out-of-bounds read in cupsUTF32ToUTF8() via missing source-length bound</p> <p>cups: OpenPrinting CUPS: Heap out-of-bounds read in cupsUTF32ToUTF8() via missing source-length bound</p> https://cve.radiocsirt.org/vuln/rhsa-2026:66600 https://cve.radiocsirt.org/vuln/suse-su-2026:23877-1 <p>Security update for cups</p> <p>Security update for cups</p> https://cve.radiocsirt.org/vuln/suse-su-2026:23877-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-87875 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: cups, Ubuntu:Pro:18.04:LTS: cups, Ubuntu:Pro:20.04:LTS: cups, Ubuntu:22.04:LTS: cups, Ubuntu:24.04:LTS: cups, Ubuntu:26.04:LTS: cups</p> <p>The cupsUTF32ToUTF8() function in CUPS&#39;s cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: cups, Ubuntu:Pro:18.04:LTS: cups, Ubuntu:Pro:20.04:LTS: cups, Ubuntu:22.04:LTS: cups, Ubuntu:24.04:LTS: cups, Ubuntu:26.04:LTS: cups</p> <p>The cupsUTF32ToUTF8() function in CUPS&#39;s cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-87875 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3282 <p>Ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in CUPS ausnutzen, um Informationen offenzulegen.</p> <p>Ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in CUPS ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3282