CVE-2026-64612 Details
Description
A flaw was found in libcupsfilters and cups-filters. The PNG image reading function creates a libpng reader without installing an error recovery handler, causing the CUPS image filter process to abort when processing a malformed PNG file. An unauthenticated attacker could exploit this by submitting a specially crafted PNG print job, leading to denial of service of the in-flight print job.
A denial-of-service vulnerability has been identified in OpenPrinting's libcupsfilters and cups-filters packages. The issue arises in the PNG image reading function, which creates a libpng reader without a proper error recovery handler. This flaw causes the CUPS image filter process to crash when it encounters a malformed PNG file. An unauthenticated attacker could exploit this vulnerability by sending a specially crafted PNG print job, leading to the termination of the in-flight print job.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 20, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-248 | Uncaught Exception | [email protected] |
Affected Products
No affected product data is available for this CVE.
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 24, 2026 | CVE Modified | [email protected] |
| Aug 20, 2026 | CVE Modified | [email protected] |
| Aug 19, 2026 | CVE Modified | [email protected] |
| Jul 21, 2026 | CVE Modified | [email protected] |
| Jul 20, 2026 | CVE Modified | CISA-ADP |
| Jul 20, 2026 | New CVE Received | [email protected] |