CVE-2024-47175

CVE-2024-47175 is a critical vulnerability affecting CUPS libppd, specifically in Debian and OpenPrinting distributions. It stems from improper sanitization of IPP attributes in the ppdCreatePPDFromIPP2 function, which can lead to user-controlled input and, when chained with other functions like cfGetPrinterAttributes5, ultimately result in code execution via Foomatic. This vulnerability has a CVSS score of 9.8 (Critical) due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability, requiring no user interaction or privileges. While not yet observed in active exploitation (KEV list), a Metasploit module exists, and community discussion is high, indicating significant interest and potential for future exploitation.