CVE-2026-64612

A flaw was found in libcupsfilters and cups-filters. The PNG image reading function creates a libpng reader without installing an error recovery handler, causing the CUPS image filter process to abort when processing a malformed PNG file. An unauthenticated attacker could exploit this by submitting a specially crafted PNG print job, leading to denial of service of the in-flight print job.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://access.redhat.com/errata/RHSA-2026:56965
https://access.redhat.com/errata/RHSA-2026:57451
https://access.redhat.com/errata/RHSA-2026:58560
https://access.redhat.com/security/cve/CVE-2026-64612
https://bugzilla.redhat.com/show_bug.cgi?id=2502801
https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-7mxj-cfq5-84ch

Configurations

No configuration.

History

24 Oct 2026, 16:10

Type	Values Removed	Values Added
Summary		(es) Se encontró una vulnerabilidad en libcupsfilters y cups-filters. La función de lectura de imágenes PNG crea un lector de libpng sin instalar un gestor de recuperación de errores, lo que provoca que el proceso del filtro de imágenes de CUPS se aborte al procesar un archivo PNG malformado. Un atacante no autenticado podría explotar esto al enviar un trabajo de impresión PNG especialmente diseñado, lo que lleva a una denegación de servicio del trabajo de impresión en curso.

Information

Published : 2026-07-20 18:16

Updated : 2026-10-24 16:10

NVD link : CVE-2026-64612

Mitre link : CVE-2026-64612

CVE.ORG link : CVE-2026-64612

JSON object : View

Products Affected

No product.

CWE

CWE-248

Uncaught Exception

{"id": "CVE-2026-64612", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-64612", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-20T18:21:35.294347Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "secalert@redhat.com", "affectedData": [{"cpes": ["cpe:/o:redhat:enterprise_linux:10.2"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "versions": [{"status": "unaffected", "version": "1:2.0.0-13.el10_2", "lessThan": "*", "versionType": "rpm"}], "packageName": "libcupsfilters", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:enterprise_linux:8::appstream", "cpe:/a:redhat:enterprise_linux:8::crb"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "versions": [{"status": "unaffected", "version": "0:1.20.0-36.el8_10.1", "lessThan": "*", "versionType": "rpm"}], "packageName": "cups-filters", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:enterprise_linux:9::appstream", "cpe:/a:redhat:enterprise_linux:9::crb"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "versions": [{"status": "unaffected", "version": "0:1.28.7-27.el9_8", "lessThan": "*", "versionType": "rpm"}], "packageName": "cups-filters", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:10"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "packageName": "cups-filters", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:7"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 7", "packageName": "cups-filters", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}]}], "published": "2026-07-20T18:16:56.273", "references": [{"url": "https://access.redhat.com/errata/RHSA-2026:56965", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:57451", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:58560", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/security/cve/CVE-2026-64612", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502801", "source": "secalert@redhat.com"}, {"url": "https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-7mxj-cfq5-84ch", "source": "secalert@redhat.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-248"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in libcupsfilters and cups-filters. The PNG image reading function creates a libpng reader without installing an error recovery handler, causing the CUPS image filter process to abort when processing a malformed PNG file. An unauthenticated attacker could exploit this by submitting a specially crafted PNG print job, leading to denial of service of the in-flight print job."}, {"lang": "es", "value": "Se encontr\u00f3 una vulnerabilidad en libcupsfilters y cups-filters. La funci\u00f3n de lectura de im\u00e1genes PNG crea un lector de libpng sin instalar un gestor de recuperaci\u00f3n de errores, lo que provoca que el proceso del filtro de im\u00e1genes de CUPS se aborte al procesar un archivo PNG malformado. Un atacante no autenticado podr\u00eda explotar esto al enviar un trabajo de impresi\u00f3n PNG especialmente dise\u00f1ado, lo que lleva a una denegaci\u00f3n de servicio del trabajo de impresi\u00f3n en curso."}], "lastModified": "2026-10-24T16:10:00.153", "sourceIdentifier": "secalert@redhat.com"}