Technical impact
The vulnerability stems from improper handling of symbolic links during installation of the CUPS Printer Driver for macOS. A local attacker who can write files while the installer is running can craft a symbolic link that directs the installer to modify directory permissions that the attacker normally lacks access to. This results in the attacker gaining higher privilege levels within the system. The weakness aligns with CWE‑59, a relative path traversal issue.
Affected Systems
Affected products include Canon PIXUS iX6800 Series, Canon PIXMA MG2500 Series, and Canon PIXMA iX6800 Series CUPS Printer Drivers for macOS. Versions up to and including 16.91.0.0 are vulnerable: 16.91.0.0 or earlier for Japan and the same or earlier versions for US and Europe.
Risk and Exploitability
The CVSS score of 5.1 indicates a moderate severity. With no EPSS score available, the likelihood of exploitation is uncertain, and the vulnerability is not listed in the CISA KEV catalog. Since the attack vector requires local user access and seemingly occurs during installation, the risk is primarily confined to environments where privileged installation is performed with unvalidated installers. Nonetheless, the potential for privilege escalation warrants prompt action.
