CVE-2024-47175 HIGH

CVE-2024-47175: libppd's ppdCreatePPDFromIPP2 function does not sanitize IPP attributes when creating the PPD buffer

Vendor Openprinting
Product libppd
Weakness CWE-20 · Input validation
Published September 26, 2024
Last update November 3, 2025
View on NVD All CVEs

CVSS base score

8.6/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

What the vulnerability does

01Description

CUPS is a standards-based, open-source printing system, and `libppd` can be used for legacy PPD file support. The `libppd` function `ppdCreatePPDFromIPP2` does not sanitize IPP attributes when creating the PPD buffer. When used in combination with other functions such as `cfGetPrinterAttributes5`, can result in user controlled input and ultimately code execution via Foomatic. This vulnerability can be part of an exploit chain leading to remote code execution (RCE), as described in CVE-2024-47176.

Key dates

02Disclosure timeline

September 26, 2024 CVE published
November 3, 2025 Record updated