CVE-2026-34979OpenPrinting CUPS: Heap overflow in `get_options()`

Description

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, there is a heap-based buffer overflow in the CUPS scheduler when building filter option strings from job attribute. At time of publication, there are no publicly available patches.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• https://github.com/OpenPrinting/cups/security/advisories/GHSA-6qxf-7jx6-86fh ExploitVendor Advisory