SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-64612

HIGH · CVSS 7.5 EPSS 0.35% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-20 · Last synced 2026-08-19

CyberRota Analysis

AI-Generated

A vulnerability exists in the image processing functionality of libcupsfilters and cups-filters, where the PNG reading function lacks an error recovery handler, resulting in potential crashes when handling malformed PNG files. This flaw allows unauthenticated attackers to disrupt print services by submitting specially crafted PNG print jobs, leading to denial of service. Organizations utilizing CUPS for printing should prioritize addressing this issue to maintain service availability and prevent exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-64612
Severity
HIGH
CVSS
7.5
EPSS
0.35%

Original NVD Description

A flaw was found in libcupsfilters and cups-filters. The PNG image reading function creates a libpng reader without installing an error recovery handler, causing the CUPS image filter process to abort when processing a malformed PNG file. An unauthenticated attacker could exploit this by submitting a specially crafted PNG print job, leading to denial of service of the in-flight print job.