Back to Database
Status published
Medium
CVE-2025-61915
OpenPrinting CUPS vulnerable to stack based out-of-bound write
Vulnerability Description
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to version 2.4.15, a user in the lpadmin group can use the cups web ui to change the config and insert a malicious line. Then the cupsd process which runs as root will parse the new config and cause an out-of-bound write. This issue has been patched in version 2.4.15.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-61915
Credits & Attribution
No credits recorded in the NVD database.
References
More from OpenPrinting
View All →CVE-2025-64524
CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code Execution
Low
3.3
CVE-2025-64503
[BIGSLEEP-434615384] cups-filters 1.x: out of bounds write in pdftoraster
Medium
4
CVE-2025-58436
OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack
Medium
5.1
CVE-2025-58364
cups: Remote DoS via null dereference
Medium
6.5
CVE-2025-58060
cups has Authentication bypass with AuthType Negotiate
High
8
Affected Vendor
OpenPrinting
View all reports →Affected Software
cups
Vulnerable Versions:
< 2.4.15
Timeline
Official Publish:
November 29th, 2025
Last Modified:
December 3rd, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H