The vulnerability is an off‑by‑two error in the papd lp_write() function of Netatalk. It permits an adjacent network attacker to modify limited data or trigger a minor service disruption by sending crafted print data. The weakness is an offset error (CWE‑193).

Versions 2.0.0 through 4.4.2 of Netatalk are affected; any deployment running those releases must apply the vendor fix or upgrade to the most recent Netatalk version when a patch is available.

The CVSS score of 3.7 places this issue in the Low severity range. The EPSS metric is not available, and the vulnerability is not listed in the CISA KEV catalog, indicating no known public exploits. The likely attack vector is remote access to a Netatalk server that permits write operations, but the description does not specify further details; thus the overall exploit likelihood remains low, though a determined attacker could potentially trigger the off‑by‑two error to destabilize the service.