AZL-100920
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-100920.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-100920
- Upstream
- Published
- 2026-09-09T17:17:53Z
- Modified
- 2026-09-14T17:34:05Z
- Summary
- CVE-2026-87875 affecting package cups 2.4.19-1
- Details
-
The cupsUTF32ToUTF8() function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content.
- References