7 matches found
CVE-2026-107886
A flaw was found in CUPS. An authenticated user authorized to manage printer classes can cause a Denial of Service DoS by triggering a double-free memory error during printer class management. By submitting a class modification request with invalid parameters followed by a class deletion request,...
CVE-2026-107886
OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an existing class member list, addclass frees pclass-printers without clearing the pointer. If subsequent validation fails, the class retains the dangling pointer;...
CVE-2026-107886
OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an existing class member list, addclass frees pclass-printers without clearing the pointer. If subsequent validation fails, the class retains the dangling pointer;...
CVE-2026-107886
OpenPrinting CUPS versions prior to 2.4.20 are vulnerable to a double-free vulnerability in the printer-class management component. The issue occurs because add_class() frees pclass->printers without clearing the pointer; if subsequent validation fails, the class retains a dangling pointer tha...
CVE-2026-107886
OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an existing class member list, addclass frees pclass-printers without clearing the pointer. If subsequent validation fails, the class retains the dangling pointer;...
EUVD-2026-95470
OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an existing class member list, addclass frees pclass-printers without clearing the pointer. If subsequent validation fails, the class retains the dangling pointer;...
PT-2026-108720
OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an existing class member list, add class frees pclass-printers without clearing the pointer. If subsequent validation fails, the class retains the dangling pointer;...