OpenPrinting records
25 published records for vendor openprinting.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 3 · 12%
- Pre-auth RCE
- 2
- With a fix record
- 96%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-20 Improper Input Validation4
- CWE-122 Heap-based Buffer Overflow4
- CWE-125 Out-of-bounds Read2
- CWE-416 Use After Free2
- CWE-287 Improper Authentication2
- CWE-121 Stack-based Buffer Overflow2
The weakness classes this vendor ships most often: where to look.
CWEAll records
25 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
58Plan | CVE-2024-47175Weaponized | libppd's ppdCreatePPDFromIPP2 function does not sanitize IPP attributes when creating the PPD bufferopenprinting · libppd · CWE-20 | Critical9.8 | — | 63.6% | Sep 26, 2024 |
57Plan | CVE-2024-47076Weaponized | libcupsfilters's cfGetPrinterAttributes5 does not validate IPP attributes returned from an IPP serveropenprinting · libcupsfilters · CWE-20 | High8.6 | — | 77.6% | Sep 26, 2024 |
39Monitor | CVE-2023-34095No exploit | cpdb-libs vulnerable to buffer overflows via scanfopenprinting · cpdb-libs · CWE-121 | Critical9.8 | — | 1.5% | Jun 14, 2023 |
36Monitor | CVE-2024-47176Weaponized | cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any sourceopenprinting · cups-browsed · CWE-1327 | Medium5.3 | — | 50.6% | Sep 26, 2024 |
32Monitor | CVE-2025-58060Proof of concept | cups has Authentication bypass with AuthType Negotiateopenprinting · cups · CWE-287 | High8.0 | — | 1.0% | Sep 11, 2025 |
28Monitor | CVE-2023-34241No exploit | CUPS vulnerable to use-after-free in cupsdAcceptClient()openprinting · cups · CWE-416 | High7.1 | — | 1.4% | Jun 22, 2023 |
28Monitor | CVE-2023-4504Proof of concept | OpenPrinting CUPS/libppd Postscript Parsing Heap Overflowopenprinting · cups · CWE-122 | High7.0 | — | 0.7% | Sep 21, 2023 |
27Monitor | CVE-2024-35235No exploit | Cupsd Listen arbitrary chmod 0140777openprinting · cups · CWE-59 | Medium6.7 | — | 2.4% | Jun 11, 2024 |
27Monitor | CVE-2024-45062No exploit | A stack based buffer overflow vulnerability is present in OpenPrinting ippusbxd 1.34.openprinting · ippusbxd firmware · CWE-121 | Medium6.8 | — | 0.4% | Aug 19, 2025 |
26Monitor | CVE-2025-58364No exploit | cups: Remote DoS via null dereferenceopenprinting · cups · CWE-20 | Medium6.5 | — | 1.1% | Sep 11, 2025 |
26Monitor | CVE-2022-26691No exploit | A logic issue was addressed with improved state management.apple · cups · CWE-697 | Medium6.7 | — | 0.6% | May 26, 2022 |
26Monitor | CVE-2025-61915No exploit | OpenPrinting CUPS vulnerable to stack based out-of-bound writeopenprinting · cups · CWE-124 | Medium6.7 | — | 0.5% | Nov 29, 2025 |
26Monitor | CVE-2026-34978No exploit | OpenPrinting CUPS: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (and clobbering of job.cache)openprinting · cups · CWE-22 | Medium6.5 | — | 0.4% | Apr 3, 2026 |
25Monitor | CVE-2026-27447No exploit | OpenPrinting CUPS: Authorization bypass via case-insensitive group-member lookupopenprinting · cups · CWE-863 | Medium6.3 | — | 0.3% | Apr 3, 2026 |
24Monitor | CVE-2026-34980Proof of concept | OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the networkopenprinting · cups · CWE-20 | Medium6.1 | — | 0.3% | Apr 3, 2026 |
24Monitor | CVE-2026-39316No exploit | CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointeropenprinting · cups · CWE-416 | Medium6.2 | — | 0.2% | Apr 7, 2026 |
24Monitor | CVE-2026-39314No exploit | CUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported`openprinting · cups · CWE-191 | Medium6.2 | — | 0.2% | Apr 7, 2026 |
22Monitor | CVE-2023-32324No exploit | OpenPrinting CUPS vulnerable to heap buffer overflowopenprinting · cups · CWE-122 | Medium5.5 | — | 1.5% | Jun 1, 2023 |
22Monitor | CVE-2025-58436No exploit | OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attackopenprinting · cups · CWE-400 | Medium5.5 | — | 0.2% | Nov 29, 2025 |
22Monitor | CVE-2025-64524No exploit | CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code Executionopenprinting · cups-filters · CWE-122 | Medium5.5 | — | 0.2% | Nov 20, 2025 |
21Monitor | CVE-2026-34979No exploit | OpenPrinting CUPS: Heap overflow in `get_options()`openprinting · cups · CWE-122 | Medium5.3 | — | 0.4% | Apr 3, 2026 |
21Monitor | CVE-2026-41079No exploit | OpenPrinting CUPS: Heap out-of-bounds read in SNMP supply-level polling leaks stack memory to authenticated usersopenprinting · cups · CWE-125 | Medium5.4 | — | 0.4% | Apr 24, 2026 |
20Monitor | CVE-2026-34990Proof of concept | OpenPrinting CUPS: Local print admin token disclosure using temporary printersopenprinting · cups · CWE-287 | Medium5.0 | — | 0.2% | Apr 3, 2026 |
14Monitor | CVE-2025-57812No exploit | [BIGSLEEP-434612419] CUPS-Filters has heap-buffer-overflow write in `cfImageLut()`openprinting · cups-filters · CWE-125 | Low3.7 | — | 0.4% | Nov 12, 2025 |
13Monitor | CVE-2025-64503No exploit | [BIGSLEEP-434615384] cups-filters 1.x: out of bounds write in pdftorasteropenprinting · cups-filters · CWE-787 | Low3.3 | — | 0.2% | Nov 12, 2025 |
- CVE-2024-4717558Plan
libppd's ppdCreatePPDFromIPP2 function does not sanitize IPP attributes when creating the PPD buffer
CriticalCVSS 9.8WeaponizedEPSS 64%openprinting · libppdSep 26, 2024
- CVE-2024-4707657Plan
libcupsfilters's cfGetPrinterAttributes5 does not validate IPP attributes returned from an IPP server
HighCVSS 8.6WeaponizedEPSS 78%openprinting · libcupsfiltersSep 26, 2024
- CVE-2023-3409539Monitor
cpdb-libs vulnerable to buffer overflows via scanf
CriticalCVSS 9.8No exploitEPSS 2%openprinting · cpdb-libsJun 14, 2023
- CVE-2024-4717636Monitor
cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source
MediumCVSS 5.3WeaponizedEPSS 51%openprinting · cups-browsedSep 26, 2024
- CVE-2025-5806032Monitor
cups has Authentication bypass with AuthType Negotiate
HighCVSS 8.0Proof of conceptEPSS 1%openprinting · cupsSep 11, 2025
- CVE-2023-3424128Monitor
CUPS vulnerable to use-after-free in cupsdAcceptClient()
HighCVSS 7.1No exploitEPSS 1%openprinting · cupsJun 22, 2023
- CVE-2023-450428Monitor
OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow
HighCVSS 7.0Proof of conceptEPSS 1%openprinting · cupsSep 21, 2023
- CVE-2024-3523527Monitor
Cupsd Listen arbitrary chmod 0140777
MediumCVSS 6.7No exploitEPSS 2%openprinting · cupsJun 11, 2024
- CVE-2024-4506227Monitor
A stack based buffer overflow vulnerability is present in OpenPrinting ippusbxd 1.34.
MediumCVSS 6.8No exploitEPSS 0%openprinting · ippusbxd firmwareAug 19, 2025
- CVE-2025-5836426Monitor
cups: Remote DoS via null dereference
MediumCVSS 6.5No exploitEPSS 1%openprinting · cupsSep 11, 2025
- CVE-2022-2669126Monitor
A logic issue was addressed with improved state management.
MediumCVSS 6.7No exploitEPSS 1%apple · cupsMay 26, 2022
- CVE-2025-6191526Monitor
OpenPrinting CUPS vulnerable to stack based out-of-bound write
MediumCVSS 6.7No exploitEPSS 0%openprinting · cupsNov 29, 2025
- CVE-2026-3497826Monitor
OpenPrinting CUPS: Path traversal in RSS notify-recipient-uri enables file write outside CacheDir/rss (and clobbering of job.cache)
MediumCVSS 6.5No exploitEPSS 0%openprinting · cupsApr 3, 2026
- CVE-2026-2744725Monitor
OpenPrinting CUPS: Authorization bypass via case-insensitive group-member lookup
MediumCVSS 6.3No exploitEPSS 0%openprinting · cupsApr 3, 2026
- CVE-2026-3498024Monitor
OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network
MediumCVSS 6.1Proof of conceptEPSS 0%openprinting · cupsApr 3, 2026
- CVE-2026-3931624Monitor
CUPS has a use-after-free in `cupsdDeleteTemporaryPrinters` via dangling subscription pointer
MediumCVSS 6.2No exploitEPSS 0%openprinting · cupsApr 7, 2026
- CVE-2026-3931424Monitor
CUPS has an integer underflow in `_ppdCreateFromIPP` causes root cupsd crash via negative `job-password-supported`
MediumCVSS 6.2No exploitEPSS 0%openprinting · cupsApr 7, 2026
- CVE-2023-3232422Monitor
OpenPrinting CUPS vulnerable to heap buffer overflow
MediumCVSS 5.5No exploitEPSS 1%openprinting · cupsJun 1, 2023
- CVE-2025-5843622Monitor
OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack
MediumCVSS 5.5No exploitEPSS 0%openprinting · cupsNov 29, 2025
- CVE-2025-6452422Monitor
CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code Execution
MediumCVSS 5.5No exploitEPSS 0%openprinting · cups-filtersNov 20, 2025
- CVE-2026-3497921Monitor
OpenPrinting CUPS: Heap overflow in `get_options()`
MediumCVSS 5.3No exploitEPSS 0%openprinting · cupsApr 3, 2026
- CVE-2026-4107921Monitor
OpenPrinting CUPS: Heap out-of-bounds read in SNMP supply-level polling leaks stack memory to authenticated users
MediumCVSS 5.4No exploitEPSS 0%openprinting · cupsApr 24, 2026
- CVE-2026-3499020Monitor
OpenPrinting CUPS: Local print admin token disclosure using temporary printers
MediumCVSS 5.0Proof of conceptEPSS 0%openprinting · cupsApr 3, 2026
- CVE-2025-5781214Monitor
[BIGSLEEP-434612419] CUPS-Filters has heap-buffer-overflow write in `cfImageLut()`
LowCVSS 3.7No exploitEPSS 0%openprinting · cups-filtersNov 12, 2025
- CVE-2025-6450313Monitor
[BIGSLEEP-434615384] cups-filters 1.x: out of bounds write in pdftoraster
LowCVSS 3.3No exploitEPSS 0%openprinting · cups-filtersNov 12, 2025