important · Edge — Printing
A remotely submitted raster job can execute code in a PAPPL print service.
Affects
PAPPL, a C printing-application framework used to expose IPP printing services on Unix-like systems.
On a listener configured for remote jobs, attacker-controlled cupsWidth drives raster loops beyond the heap line buffer allocated for the output width.
Detail and 2 sources
The execution path was researcher-demonstrated and a patch is published.