CVE-2026-87875

Publié : 9 septembre 2026

Modifié : 9 septembre 2026

Score CVSS

4.3

MEDIUM

Description détaillée

The cupsUTF32ToUTF8() function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Références et Patchs

https://access.redhat.com/security/cve/CVE-2026-87875 https://bugzilla.redhat.com/show_bug.cgi?id=2530994 https://github.com/OpenPrinting/cups/security/advisories/GHSA-559w-7676-3xrq https://github.com/OpenPrinting/cups/security/advisories/GHSA-559w-7676-3xrq

Dernières Vulnérabilités

CVE-2026-79323

Information disclosure in the blogComments GraphQL query in Magefan Blog GraphQL for Magento 2 (magefan/module-blog-graph-ql) through 2.2.1 allows remote unauthenticated attackers to obtain blog commenter email addresses and internal customer and admin identifiers via a POST request to /graphql.

VOIR DÉTAILS

CVE-2026-79322

SQL injection in the RelatedProduct block in Mageplaza Blog for Magento 2 (mageplaza/magento-2-blog-extension) through 4.3.2 allows remote unauthenticated attackers to execute arbitrary SQL commands and read arbitrary database contents via the id parameter to /mpblog/post/view.

VOIR DÉTAILS

CVE-2026-61907

An issue was discovered in Cyrus IMAP before 3.12.4. JMAP snooze bypasses the destination-mailbox ACL. An authenticated user with insert permissions on another user's snoozed mailbox could cause insertion of mail to that user's inbox, or any other of their mailboxes whose id was known to the user, despite having no insert permissions to the target mailbox.

VOIR DÉTAILS