CVE-2026-107655
Received Received - Intake

CUPS Null Pointer Dereference in IPP Request Handling

Publication date: 2026-10-09

Last updated on: 2026-10-09

Assigner: redhat-SADP

Description
A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an unhandled null pointer dereference. An unauthenticated attacker permitted to submit jobs to a shared printer queue can send a crafted Internet Printing Protocol (IPP) request to crash the print daemon, resulting in a temporary Denial of Service (DoS) for all printing services.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-09
Last Modified
2026-10-09
Generated
2026-10-09
AI Q&A
2026-10-09
EPSS Evaluated
N/A
NVD
CVE-2026-107655
EUVD
EUVD-2026-95572

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
openprinting cups to 2.4.20 (inc)
openprinting cups From 2.4.21 (inc)
openprinting cups 2.5
apple cups *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-476 The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-107655 is a NULL pointer dereference flaw in CUPS (Common UNIX Printing System). When processing embedded job ticket comments in PostScript or PDF documents, CUPS improperly handles IPP attributes. An unauthenticated attacker can send a crafted IPP request to crash the print daemon (cupsd), causing a temporary Denial of Service (DoS) for all printing services.

Detection Guidance

Monitor CUPS service logs for crashes or segmentation faults. Check for unusual IPP requests containing job ticket comments or the attributes-natural-language attribute. Use commands like 'journalctl -u cups' or 'tail -f /var/log/cups/error_log' to inspect logs for crashes.

Impact Analysis

This vulnerability allows an attacker to disrupt printing services for all users by crashing the CUPS daemon. The impact is temporary as the service restarts automatically, but it halts printing until recovery. No confidentiality or integrity impact has been demonstrated.

Compliance Impact

This vulnerability primarily causes a temporary Denial of Service (DoS) for printing services by crashing the CUPS daemon. It does not directly impact confidentiality or integrity of data, which are key concerns for GDPR and HIPAA. However, prolonged disruption of printing services could indirectly affect compliance by delaying document processing or record-keeping in environments where printing is critical.

Mitigation Strategies

Upgrade CUPS to version 2.4.21 or later. Disable job ticket comment processing by setting 'JobTicketComments No' in cups-files.conf. Restrict access to shared printer queues to trusted users only. Apply vendor patches if available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-107655. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart