CVE-2026-64612: Libcupsfilters: cups-filters: libcupsfilters: cups image filter process abort via malformed png
A flaw was found in libcupsfilters and cups-filters. The PNG image reading function creates a libpng reader without installing an error recovery handler, causing the CUPS image filter process to abort when processing a malformed PNG file. An unauthenticated attacker could exploit this by submitting a specially crafted PNG print job, leading to denial of service of the in-flight print job.
Other sources
libcupsfilters through 2.1.1 and cups-filters through 1.28.17 contain a denial-of-service flaw in cfImageReadPNG() (2.x) / cupsImageReadPNG() (1.x) in cupsfilters/image-png.c. The function creates the libpng read struct with pngcreatereadstruct(PNGLIBPNGVERSTRING, NULL, NULL, NULL) without installing a custom error handler or setjmp(pngjmpbuf(pp)) recovery frame. On any libpng parse error the default error handler calls abort(), terminating the filter process (SIGABRT, exit 134). An unauthenticated client that can submit an image print job can crash the imagetoraster/imagetopdf filter with a single malformed PNG. CWE-248. No upstream fix available.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Mitigate the denial-of-service by preventing untrusted clients from submitting image print jobs to CUPS (e.g., restrict access to the CUPS printing interface/queue via network controls such as firewall/ACL so only trusted users/systems can submit jobs).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64612?
CVE-2026-64612 has a severity rating of 7.5, which is categorized as high.
How do I fix CVE-2026-64612?
To fix CVE-2026-64612, update to the latest version of libcupsfilters and cups-filters as provided by your software vendor.
What products are affected by CVE-2026-64612?
CVE-2026-64612 affects libcupsfilters and cups-filters software.
What type of attack can exploit CVE-2026-64612?
CVE-2026-64612 can be exploited by an unauthenticated attacker submitting a malformed PNG file.
What are the potential consequences of CVE-2026-64612?
The consequence of CVE-2026-64612 is that the CUPS image filter process could abort, leading to denial of service.