p PatchFirst

CVE-2026-64612

CVE-2026-64612 · Libcupsfilters: cups-filters: libcupsfilters: cups image filter process abort via malformed png

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A flaw was found in libcupsfilters and cups-filters. The PNG image reading function creates a libpng reader without installing an error recovery handler, causing the CUPS image filter process to abort when processing a malformed PNG file. An unauthenticated attacker could exploit this by submitting a specially crafted PNG print job, leading to denial of service of the in-flight print job.

CVSS 7.5 · High · EPSS 0.7%

Published
Updated

Stack: system

Affected products and versions

  • red hat enterprise linux 10

    Versions
    • ≥ 1:2.0.0-13.el10_2: Not affected (rpm)

    No fix published

  • red hat enterprise linux 8

    Versions
    • ≥ 0:1.20.0-36.el8_10.1: Not affected (rpm)

    No fix published

  • red hat enterprise linux 9

    Versions
    • ≥ 0:1.28.7-27.el9_8: Not affected (rpm)

    No fix published

  • red hat enterprise linux 10

    No fix published

  • red hat enterprise linux 7

    No fix published

  • cups-filters Debian:12

    Versions
    • 1.28.17-3
    • 1.28.17-3+deb12u1
    • 1.28.17-3+deb12u2
    • 1.28.17-3.1
    • 1.28.17-3.1~exp1
    • 1.28.17-4
    • 1.28.17-4.1
    • 1.28.17-5
    • 1.28.17-6
    • 1.28.17-7
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • cups-filters Debian:13

    Versions
    • 1.28.17-6
    • 1.28.17-6+deb13u1
    • 1.28.17-7
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • cups-filters Debian:14

    Versions
    • 1.28.17-6
    • 1.28.17-7
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libcupsfilters Debian:13

    Versions
    • 2.0.0-3
    • 2.0.0-3+deb13u1
    • 2.1.1-1
    • 2.1.1-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libcupsfilters Debian:14

    Versions
    • 2.0.0-3
    • 2.1.1-1
    • 2.1.1-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • cups-filters Ubuntu:Pro:16.04:LTS

    Versions
    • 1.0.76-1
    • 1.1.0-1
    • 1.1.0-1build1
    • 1.3.0-1
    • 1.4.0-1
    • 1.5.0-1
    • 1.6.0-1
    • 1.7.0-1
    • 1.8.1-1
    • 1.8.2-1
    • 1.8.2-2
    • 1.8.2-2ubuntu2
    • 1.8.2-2ubuntu3
    • 1.8.3-2ubuntu1
    • 1.8.3-2ubuntu2
    • 1.8.3-2ubuntu3
    • 1.8.3-2ubuntu3.1
    • 1.8.3-2ubuntu3.4
    • 1.8.3-2ubuntu3.5
    • 1.8.3-2ubuntu3.5+esm1
    • 1.8.3-2ubuntu3.5+esm2
    • 1.8.3-2ubuntu3.5+esm3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • cups-filters Ubuntu:Pro:18.04:LTS

    Versions
    • 1.17.9-0ubuntu1
    • 1.17.9-1
    • 1.20.0-2
    • 1.20.1-1
    • 1.20.1-1build1
    • 1.20.2-0ubuntu1
    • 1.20.2-0ubuntu2
    • 1.20.2-0ubuntu3
    • 1.20.2-0ubuntu3.1
    • 1.20.2-0ubuntu3.3
    • 1.20.2-0ubuntu3.3+esm1
    • 1.20.2-0ubuntu3.3+esm2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • cups-filters Ubuntu:Pro:20.04:LTS

    Versions
    • 1.25.11-0ubuntu1
    • 1.25.11-1
    • 1.25.12-1
    • 1.25.13-1
    • 1.26.0-1
    • 1.26.1-1
    • 1.26.2-1
    • 1.27.0-1
    • 1.27.0-2
    • 1.27.1-1
    • 1.27.1-2
    • 1.27.1-3
    • 1.27.2-1
    • 1.27.3-1
    • 1.27.4-1
    • 1.27.4-1ubuntu0.2
    • 1.27.4-1ubuntu0.3
    • 1.27.4-1ubuntu0.4
    • 1.27.4-1ubuntu0.4+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • cups-filters Ubuntu:22.04:LTS

    Versions
    • 1.28.10-2
    • 1.28.11-1
    • 1.28.11-2
    • 1.28.12-1
    • 1.28.13-0ubuntu1
    • 1.28.14-1
    • 1.28.15-0ubuntu1
    • 1.28.15-0ubuntu1.2
    • 1.28.15-0ubuntu1.3
    • 1.28.15-0ubuntu1.4
    • 1.28.15-0ubuntu1.5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • cups-filters Ubuntu:24.04:LTS

    Versions
    • 2.0.0-0ubuntu1
    • 2.0.0-0ubuntu3
    • 2.0.0-0ubuntu4
    • 2.0.0-0ubuntu4.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libcupsfilters Ubuntu:24.04:LTS

    Versions
    • 2.0.0-0ubuntu1
    • 2.0.0-0ubuntu6
    • 2.0.0-0ubuntu7
    • 2.0.0-0ubuntu7.1
    • 2.0.0-0ubuntu7.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • cups-filters Ubuntu:26.10

    Versions
    • 2.0.1-0ubuntu4
    • 2.0.1-0ubuntu5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libcupsfilters Ubuntu:26.10

    Versions
    • 2.1.1-0ubuntu5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • cups-filters Ubuntu:26.04:LTS

    Versions
    • 2.0.1-0ubuntu3
    • 2.0.1-0ubuntu4
    • 2.0.1-0ubuntu4.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libcupsfilters Ubuntu:26.04:LTS

    Versions
    • 2.1.1-0ubuntu3
    • 2.1.1-0ubuntu4
    • 2.1.1-0ubuntu5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →