VULNERABILITY INTELLIGENCE

CVE-2025-61915

CVSS score6 MEDIUM

EPSS probability0.50%

CISA KEVNot currently listed

Published2025-11-29

Last modified2026-10-07

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Description

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a user in the lpadmin group can use the cups web ui to change the config and insert a malicious line. Then the cupsd process which runs as root will parse the new config and cause an out-of-bound write. This issue has been patched in version 2.4.15.

Weakness classification

security-advisories@github.com: CWE-124

Primary references

security-advisories@github.com — Patch
security-advisories@github.com — Release Notes
security-advisories@github.com — Exploit, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Vendor Advisory