CVE-2026-64612

NameCVE-2026-64612
DescriptionA flaw was found in libcupsfilters and cups-filters. The PNG image reading function creates a libpng reader without installing an error recovery handler, causing the CUPS image filter process to abort when processing a malformed PNG file. An unauthenticated attacker could exploit this by submitting a specially crafted PNG print job, leading to denial of service of the in-flight print job.
SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs1142687

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
cups-filters (PTS)bullseye1.28.7-1+deb11u2vulnerable
bullseye (security)1.28.7-1+deb11u4vulnerable
bookworm1.28.17-3+deb12u2vulnerable
bookworm (security)1.28.17-3+deb12u1vulnerable
trixie1.28.17-6+deb13u1vulnerable
forky, sid1.28.17-7vulnerable
libcupsfilters (PTS)trixie2.0.0-3+deb13u1vulnerable
forky, sid2.1.1-2vulnerable

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
cups-filterssource(unstable)(unfixed)
libcupsfilterssource(unstable)(unfixed)1142687

Notes

[trixie] - libcupsfilters <no-dsa> (Minor issue)
[bookworm] - libcupsfilters <postponed> (Minor issue)
[bullseye] - libcupsfilters <postponed> (Minor issue)
[trixie] - cups-filters <no-dsa> (Minor issue)
[bookworm] - cups-filters <postponed> (Minor issue)
[bullseye] - cups-filters <postponed> (Minor issue)
https://bugzilla.redhat.com/show_bug.cgi?id=2502801
https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-7mxj-cfq5-84ch
https://github.com/OpenPrinting/libcupsfilters/commit/e8888af31419 (2.2.0)

Search for package or bug name: Reporting problems