CVE-2023-4504 PoC — OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow

Source

https://github.com/djjohnson565/CUPS-Exploit

Associated Vulnerability

Title: OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow (CVE-2023-4504)
Description:Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in CUPS version 2.4.7, released in September of 2023.

Description

Heap-based buffer overflow example based on CVE-2023-4504

Readme

# CUPS-Exploit
## Heap-based buffer overflow example based on [CVE-2023-4504](https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h)

Collaboration by Derek Johnson and Shobhit Mehrotra\
CS367 Spring 2025 Final Project\
[You can view our report here!](https://github.com/djjohnson565/CUPS-Exploit/blob/main/Report.pdf)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →