CVE-2026-107890

OpenPrinting CUPS versions before 2.4.20 are vulnerable to a NULL pointer dereference during job-creation requests. The issue arises when repeated IPP group tags cause the parser to create unnamed separator attributes with IPP_TAG_ZERO . The add_job() function incorrectly converts these to IPP_TA...