CVE-2026-107886

OpenPrinting CUPS versions prior to 2.4.20 are vulnerable to a double-free vulnerability in the printer-class management component. The issue occurs because add_class() frees pclass->printers without clearing the pointer; if subsequent validation fails, the class retains a dangling pointer tha...