{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","feed_url":"https://feed.craftedsignal.io/vendors/openprinting/feed.json","home_page_url":"https://feed.craftedsignal.io/","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-64612"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["libcupsfilters","cups-filters"],"_cs_severities":["low"],"_cs_tags":["vulnerability","denial-of-service","cups","linux","unix"],"_cs_type":"advisory","_cs_vendors":["OpenPrinting"],"content_html":"\u003cp\u003eCVE-2026-64612 is a denial-of-service vulnerability found in the libcupsfilters and cups-filters components of the Common Unix Printing System (CUPS). The flaw originates from the PNG image reading function, which fails to install an error recovery handler for the libpng library. This oversight allows an unauthenticated attacker to trigger a crash in the CUPS image filter process. By submitting a specially crafted malformed PNG file as a print job, an attacker can cause the process handling the print job to abort, effectively preventing that specific print job from completing and potentially impacting the overall availability of printing services. This vulnerability carries a CVSS v3.1 base score of 7.5, indicating a high severity due to its unauthenticated nature and direct impact on service availability.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eAn unauthenticated attacker prepares a specially crafted PNG image file designed to exploit a missing error recovery handler within libpng.\u003c/li\u003e\n\u003cli\u003eThe attacker submits this malformed PNG file as a print job to a vulnerable CUPS server.\u003c/li\u003e\n\u003cli\u003eThe CUPS server initiates the image filter process, which uses libcupsfilters and cups-filters to handle the PNG print job.\u003c/li\u003e\n\u003cli\u003eDuring the processing of the malformed PNG, the libpng reader encounters an error.\u003c/li\u003e\n\u003cli\u003eDue to the absence of an error recovery handler, the libcupsfilters process aborts unexpectedly.\u003c/li\u003e\n\u003cli\u003eThe in-flight print job fails, resulting in a denial of service for that specific job and potentially affecting the stability of the CUPS printing environment.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of CVE-2026-64612 leads to a denial of service for print jobs on affected CUPS servers. An unauthenticated attacker can repeatedly submit malicious PNGs, causing the CUPS image filter processes to crash and rendering the printing service unreliable or unavailable for legitimate users. This can disrupt business operations that rely heavily on printing capabilities, such as those in corporate, educational, or government sectors. While the vulnerability primarily affects individual print jobs, persistent exploitation could necessitate manual intervention to restart services or clear queues, leading to operational downtime and productivity loss.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eApply available patches from OpenPrinting for libcupsfilters and cups-filters to address CVE-2026-64612 immediately.\u003c/li\u003e\n\u003cli\u003eMonitor CUPS server logs for frequent process crashes or unexpected termination of image filter processes, which could indicate attempted exploitation of CVE-2026-64612.\u003c/li\u003e\n\u003cli\u003eEnsure that operating system and application logging for CUPS services are enabled and configured to capture error conditions.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-07-20T18:18:31Z","date_published":"2026-07-20T18:18:31Z","id":"https://feed.craftedsignal.io/briefs/2026-07-cve-2026-64612-cups-dos/","summary":"A high-severity denial-of-service vulnerability (CVE-2026-64612) exists in libcupsfilters and cups-filters, allowing an unauthenticated attacker to cause the CUPS image filter process to abort by submitting a specially crafted PNG print job, leading to service disruption.","title":"CVE-2026-64612 - libcupsfilters and cups-filters Denial of Service","url":"https://feed.craftedsignal.io/briefs/2026-07-cve-2026-64612-cups-dos/"}],"language":"en","title":"CraftedSignal Threat Feed - OpenPrinting","version":"https://jsonfeed.org/version/1.1"}