title: OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow
description: Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in CUPS version 2.4.7, released in September of 2023.
problem types:  CWE-122 Heap-based Buffer Overflow
affected:
{
defaultStatus: unaffected
product: CUPS
vendor: OpenPrinting
versions:
lessThan: 2.4.6, status: affected, version: 0, versionType: semver
}
{
defaultStatus: unaffected
product: libppd
vendor: OpenPrinting
versions:
lessThan: d09348b, status: affected, version: 0, versionType: git
}
