CVE-2026-41079 OpenPrinting CUPS: Heap out-of-bounds read in SNMP supply-level polling leaks stack memory to authenticated users
A network-adjacent attacker can leak stack memory to authenticated users via crafted SNMP responses in CUPS, exposing sensitive data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-41079?
CVE-2026-41079 is a medium-severity vulnerability in OpenPrinting cups, published on 24 Apr 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.17, a network-adjacent attacker can send a crafted SNMP response to the CUPS SNMP backend that causes an out-of-bounds read of up to 176 bytes past a stack buffer. The leaked memory is converted from UTF-16 to UTF-8 and stored as printer supply description strings, which are subsequently visible to authenticated users via IPP Get-Printer-Attributes responses and the CUPS web interface. This vulnerability is fixed in 2.4.17.
Which versions are affected by CVE-2026-41079?
It affects 1 product.
Linux distribution packages (2)
cups SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | All versions | 1.7.5-20.73.1 |
cups openSUSE:Tumbleweed | All versions | 2.4.19-2.1 |
Products include Openprinting Cups.
How do I fix CVE-2026-41079?
Upgrade to a fixed version.
Is CVE-2026-41079 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-41079 exists.
Other vulnerabilities in OpenPrinting cups
- CVE-2025-58060 cups has Authentication bypass with AuthType Negotiate
- CVE-2026-34978 Path traversal in cups
- CVE-2025-58364 cups: Remote DoS via null dereference
- CVE-2026-34980 OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network
- CVE-2025-61915 OpenPrinting CUPS vulnerable to stack based out-of-bound write
Sources
Also known as AZL-83627, CLSA-2026-1777545654, CLSA-2026-1778234216, DEBIAN-CVE-2026-41079, ECHO-8222-9154-2d64, GHSA-6wpw-g8g6-wvrv and 6 more.