OpenPrinting vulnerabilities
We track 9 vulnerabilities in OpenPrinting products across 6 products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on November 11, 2026.
Latest OpenPrinting vulnerabilities
- 7.3 High severity
pappl-retrofit: Improper Limitation of a Pathname to a Restricted Directory
A flaw was found in pappl-retrofit. The application fails to properly sanitize user-supplied filenames when handling the upload and deletion of PostScript Printer Description (PPD) files. A remote, unauthenticated attacker can exploit this directory traversal
- 7.5 High severity
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating…
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, in a network-exposed cupsd with a shared target queue, an unauthorized client can send a Print-Job to that shared PostScript queu
- 8.0 High severity
cups: Improper Authentication
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, when the `AuthType` is set to anything but `Basic`, if the request contains an `Authorization: Basic ...` header, the password
- 9.8 Critical severity
CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy…
CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functi
- 8.6 High severity
CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code…
CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used for the data format conversion tasks needed in Printer Applications. The `cfGetPr
- 7.0 High severity
CUPS: Out-of-bounds Write
Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in CUPS version 2.4.7, released in September
- 7.1 High severity
cups: Use After Free
OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Starting in version 2.0.0 and prior to version 2.4.6, CUPS logs data of free memory to the logging service AFTER the connection has been closed
- 9.8 Critical severity
cpdb-libs: Out-of-bounds Write
cpdb-libs provides frontend and backend libraries for the Common Printing Dialog Backends (CPDB) project. In versions 1.0 through 2.0b4, cpdb-libs is vulnerable to buffer overflows via improper use of `scanf(3)`. cpdb-libs uses the `fscanf()` and `scanf()` fun
- 8.8 High severity
cups-filters: Improper Neutralization of Special Elements used in an OS Command
cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. If you use the Backend Error Handler (beh) to create an accessible network printer, this security vulnerability