TI-2026-59961 CVE-2026-87875
Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound
Priority MEDIUM 53
The cupsUTF32ToUTF8() function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read.