CVE-2026-87875
Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
0th
The cupsUTF32ToUTF8() function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content.
| CWE | CWE-125 |
| Vendor | red hat |
| Product | red hat hardened images |
| Published | Sep 9, 2026 |
| Last Updated | Sep 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for red hat red hat hardened images
Be the first to know when new medium vulnerabilities affecting red hat red hat hardened images are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None
Affected Versions
Red Hat / Red Hat Hardened Images
All versions affected Red Hat / Red Hat Enterprise Linux 10
All versions affected Red Hat / Red Hat Enterprise Linux 6
All versions affected Red Hat / Red Hat Enterprise Linux 7
All versions affected Red Hat / Red Hat Enterprise Linux 8
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected Red Hat / Red Hat OpenShift Container Platform 4
All versions affected References
access.redhat.com: https://access.redhat.com/errata/RHSA-2026:66600 access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-87875 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2530994 github.com: https://github.com/OpenPrinting/cups/commit/0c6842fc615e8afa284136a092da8178abf5f142 github.com: https://github.com/OpenPrinting/cups/commit/2b1dc178a2d2325135b855142e384f4e8c42d8e4 github.com: https://github.com/OpenPrinting/cups/security/advisories/GHSA-559w-7676-3xrq
Credits
Red Hat would like to thank pant0m (Independent Security Researcher) for reporting this issue.