CVE-2026-64612

cups-filters-libs: The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX P...

CVE-2026-64612 is fixed in 7 products on 1 platform, first by RHSA-2026:56965, released June 14, 2026. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.5
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0070
53rd percentile

The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System (CUPS) distribution but is now maintained independently. Security Fix(es): * libcupsfilters: cups-filters: libcupsfilters: CUPS image filter process abort via malformed PNG (CVE-2026-64612) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
cups-filters · almalinux 8 1.20.0-36.el8_10.1 ALSA-2026:57451 Aug 20, 2026
cups-filters · almalinux 9 1.28.7-27.el9_8 ALSA-2026:58560 Aug 24, 2026
cups-filters · amzn 2023 1.28.16-3.amzn2023.0.6 ALAS2023-2026-2127 Aug 31, 2026
cups-filters · ol 8 0:1.20.0-36.0.1.el8_10.1 ELSA-2026-57451 Aug 20, 2026
cups-filters · ol 9 0:1.28.7-27.0.1.el9_8 ELSA-2026-58560 Aug 24, 2026
cups-filters · opensuse-leap 16.0 1.28.17-bp160.2.1 OPENSUSE-SU-2026:21850-1 Sep 14, 2026
cups-filters · rocky 8 0:1.20.0-36.el8_10.1 RLSA-2026:57451 Aug 21, 2026
cups-filters · rocky 9 0:1.28.7-27.el9_8 RLSA-2026:58560 Aug 24, 2026
cups-filters · sles 15.7 1.25.0-150200.3.31.1 SUSE-SU-2026:3935-1 Sep 3, 2026
cups-filters-debuginfo · amzn 2023 1.28.16-3.amzn2023.0.6 ALAS2023-2026-2127 Aug 31, 2026
cups-filters-debugsource · amzn 2023 1.28.16-3.amzn2023.0.6 ALAS2023-2026-2127 Aug 31, 2026
cups-filters-devel · almalinux 8 1.20.0-36.el8_10.1 ALSA-2026:57451 Aug 20, 2026
cups-filters-devel · almalinux 9 1.28.7-27.el9_8 ALSA-2026:58560 Aug 24, 2026
cups-filters-devel · amzn 2023 1.28.16-3.amzn2023.0.6 ALAS2023-2026-2127 Aug 31, 2026
cups-filters-devel · ol 8 0:1.20.0-36.0.1.el8_10.1 ELSA-2026-57451 Aug 20, 2026
cups-filters-devel · ol 9 0:1.28.7-27.0.1.el9_8 ELSA-2026-58560 Aug 24, 2026
cups-filters-libs · RHEL 8 0:1.20.0-36.el8_10.1 RHSA-2026:57451 Aug 20, 2026
cups-filters-libs · RHEL 9 0:1.28.7-27.el9_8 RHSA-2026:58560 Aug 28, 2026
cups-filters-libs · almalinux 8 1.20.0-36.el8_10.1 ALSA-2026:57451 Aug 20, 2026
cups-filters-libs · almalinux 9 1.28.7-27.el9_8 ALSA-2026:58560 Aug 24, 2026
cups-filters-libs · amzn 2023 1.28.16-3.amzn2023.0.6 ALAS2023-2026-2127 Aug 31, 2026
cups-filters-libs · ol 8 0:1.20.0-36.0.1.el8_10.1 ELSA-2026-57451 Aug 20, 2026
cups-filters-libs · ol 9 0:1.28.7-27.0.1.el9_8 ELSA-2026-58560 Aug 24, 2026
cups-filters-libs-debuginfo · amzn 2023 1.28.16-3.amzn2023.0.6 ALAS2023-2026-2127 Aug 31, 2026
libcupsfilters · RHEL 10 2.0.0-13.el10_2 RHSA-2026:56965 Jun 14, 2026
libcupsfilters · almalinux 10 1:2.0.0-13.el10_2 ALSA-2026:56965 Aug 19, 2026
libcupsfilters · ol 10 1:2.0.0-13.el10_2 ELSA-2026-56965 Aug 19, 2026
libcupsfilters · opensuse-leap 16.0 2.1.1-160000.3.1 OPENSUSE-SU-2026:21818-1 Sep 9, 2026
libcupsfilters · rocky 10 1:2.0.0-13.el10_2 RLSA-2026:56965 Aug 20, 2026
libcupsfilters · sles 16.0 2.1.1-160000.3.1 SUSE-SU-2026:23715-1 Sep 9, 2026

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.