CVE-2025-64524
CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code Execution
cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code Execution
cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.
- Record
CVE-2025-64524- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-122
- Updated
- 2026-11-02
EUVDEUVD-2025-198342
cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.
- Record
EUVD-2025-198342- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
NVD
cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.
- Record
CVE-2025-64524- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-122, CWE-787
- Updated
- 2026-11-02
OSV
CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code Execution
cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.
- Record
CVE-2025-64524- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-122
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2025-64524
cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.
- Record
DEBIAN-CVE-2025-64524- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2025-2751
cups-filters security update
This project provides backends, filters, and other software that was once part of the core CUPS distribution but is no longer maintained by Apple Inc. In addition it contains additional filters and software developed independently of Apple, especially filters for the PDF-centric printing workflow introduced by OpenPrinting and a daemon to browse Bonjour broadcasts of remote CUPS printers to make these printers available locally and to provide backward compatibility to the old CUPS broadcasting and browsing of CUPS 1.5.x and older.
Security Fix(es):
cups-filters contains backends, filters, and other software required to get the CUPS printing service working on operating systems other than macOS. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.(CVE-2025-64524)
- Record
OESA-2025-2751- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
Show 13 moreShow less
OSVOESA-2026-1119
cups-filters security update
This project provides backends, filters, and other software that was once part of the core CUPS distribution but is no longer maintained by Apple Inc. In addition it contains additional filters and software developed independently of Apple, especially filters for the PDF-centric printing workflow introduced by OpenPrinting and a daemon to browse Bonjour broadcasts of remote CUPS printers to make these printers available locally and to provide backward compatibility to the old CUPS broadcasting and browsing of CUPS 1.5.x and older.
Security Fix(es):
cups-filters contains backends, filters, and other software required to get the CUPS printing service working on operating systems other than macOS. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.(CVE-2025-64524)
- Record
OESA-2026-1119- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVOESA-2026-1120
cups-filters security update
This project provides backends, filters, and other software that was once part of the core CUPS distribution but is no longer maintained by Apple Inc. In addition it contains additional filters and software developed independently of Apple, especially filters for the PDF-centric printing workflow introduced by OpenPrinting and a daemon to browse Bonjour broadcasts of remote CUPS printers to make these printers available locally and to provide backward compatibility to the old CUPS broadcasting and browsing of CUPS 1.5.x and older.
Security Fix(es):
cups-filters contains backends, filters, and other software required to get the CUPS printing service working on operating systems other than macOS. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.(CVE-2025-64524)
- Record
OESA-2026-1120- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVOESA-2026-1121
cups-filters security update
This project provides backends, filters, and other software that was once part of the core CUPS distribution but is no longer maintained by Apple Inc. In addition it contains additional filters and software developed independently of Apple, especially filters for the PDF-centric printing workflow introduced by OpenPrinting and a daemon to browse Bonjour broadcasts of remote CUPS printers to make these printers available locally and to provide backward compatibility to the old CUPS broadcasting and browsing of CUPS 1.5.x and older.
Security Fix(es):
cups-filters contains backends, filters, and other software required to get the CUPS printing service working on operating systems other than macOS. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.(CVE-2025-64524)
- Record
OESA-2026-1121- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVOESA-2026-1122
cups-filters security update
This project provides backends, filters, and other software that was once part of the core CUPS distribution but is no longer maintained by Apple Inc. In addition it contains additional filters and software developed independently of Apple, especially filters for the PDF-centric printing workflow introduced by OpenPrinting and a daemon to browse Bonjour broadcasts of remote CUPS printers to make these printers available locally and to provide backward compatibility to the old CUPS broadcasting and browsing of CUPS 1.5.x and older.
Security Fix(es):
cups-filters contains backends, filters, and other software required to get the CUPS printing service working on operating systems other than macOS. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.(CVE-2025-64524)
- Record
OESA-2026-1122- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVOESA-2026-1123
cups-filters security update
This project provides backends, filters, and other software that was once part of the core CUPS distribution but is no longer maintained by Apple Inc. In addition it contains additional filters and software developed independently of Apple, especially filters for the PDF-centric printing workflow introduced by OpenPrinting and a daemon to browse Bonjour broadcasts of remote CUPS printers to make these printers available locally and to provide backward compatibility to the old CUPS broadcasting and browsing of CUPS 1.5.x and older.
Security Fix(es):
cups-filters contains backends, filters, and other software required to get the CUPS printing service working on operating systems other than macOS. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.(CVE-2025-64524)
- Record
OESA-2026-1123- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-64524
cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.
- Record
UBUNTU-CVE-2025-64524- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVCLSA-2026-1768210495 No score
cups-filters: Fix of CVE-2025-64524
- CVE-2025-64524: fix heap buffer overflow and infinite loop in rastertopclx when processing maliciously crafted raster input
- Record
CLSA-2026-1768210495- Updated
- 2026-11-02
OSVCLSA-2026-1768556132 No score
cups-filters: Fix of CVE-2025-64524
- CVE-2025-64524: fix heap buffer overflow and memory corruption via an unvalidated length parameter in CompressData function of the rastertopclx filter
- Record
CLSA-2026-1768556132- Updated
- 2026-11-02
OSVMGASA-2025-0312 No score
Updated cups-filters packages fix security vulnerability
CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code Execution. (CVE-2025-64524)
- Record
MGASA-2025-0312- Updated
- 2026-11-02
OSVSUSE-SU-2025:4158-1 No score
Security update for cups-filters
This update for cups-filters fixes the following issues:
- CVE-2025-64503: Fixed out-of-bounds write in pdftoraster tool (bsc#1253374)
- CVE-2025-57812: Fixed multiple TIFF-related issues in libcupsfilters (bsc#1253373)
- CVE-2025-64524: Fixed out-of-bounds write de to use of unvalidated length parameter in the rastertopclx filter (bsc#1253364)
- Record
SUSE-SU-2025:4158-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:4198-1 No score
Security update for cups-filters
This update for cups-filters fixes the following issues:
- CVE-2025-64503: Fixed out-of-bounds write in pdftoraster tool (bsc#1253374)
- CVE-2025-57812: Fixed multiple TIFF-related issues in libcupsfilters (bsc#1253373)
- CVE-2025-64524: Fixed out-of-bounds write de to use of unvalidated length parameter in the rastertopclx filter (bsc#1253364)
- Record
SUSE-SU-2025:4198-1- Updated
- 2026-11-02
OSVUSN-7878-1 No score
cups-filters vulnerabilities
It was discovered that cups-filters incorrectly handled certain malformed TIFF image files. A remote attacker could use this issue to cause cups-filters to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2025-57812)
It was discovered that cups-filters incorrectly handled certain malformed PDF document files. A remote attacker could use this issue to cause cups-filters to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2025-64503)
It was discovered that cups-filters incorrectly handled certain malformed CUPS Raster files. A remote attacker could use this issue to cause cups-filters to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-64524)
- Record
USN-7878-1- Updated
- 2026-11-02
OSVUSN-7878-2 No score
cups-filters vulnerabilities
USN-7878-1 fixed vulnerabilities in cups-filters, This update provides the corresponding update for CVE-2025-64524 for Ubuntu 25.04.
Original advisory details:
It was discovered that cups-filters incorrectly handled certain malformed TIFF image files. A remote attacker could use this issue to cause cups-filters to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2025-57812)
It was discovered that cups-filters incorrectly handled certain malformed PDF document files. A remote attacker could use this issue to cause cups-filters to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2025-64503)
It was discovered that cups-filters incorrectly handled certain malformed CUPS Raster files. A remote attacker could use this issue to cause cups-filters to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-64524)
- Record
USN-7878-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cups-filtersTuxCare:AlmaLinux:9.2 |
before 1.28.7-11.el9_2.1.tuxcare.els4 | 1.28.7-11.el9_2.1.tuxcare.els4 |
cups-filters-develTuxCare:AlmaLinux:9.2 |
before 1.28.7-11.el9_2.1.tuxcare.els4 | 1.28.7-11.el9_2.1.tuxcare.els4 |
cups-filters-libsTuxCare:AlmaLinux:9.2 |
before 1.28.7-11.el9_2.1.tuxcare.els4 | 1.28.7-11.el9_2.1.tuxcare.els4 |
cups-filtersTuxCare:AlmaLinux:9.6 |
before 1.28.7-20.el9.tuxcare.els1 | 1.28.7-20.el9.tuxcare.els1 |
cups-filters-develTuxCare:AlmaLinux:9.6 |
before 1.28.7-20.el9.tuxcare.els1 | 1.28.7-20.el9.tuxcare.els1 |
cups-filters-libsTuxCare:AlmaLinux:9.6 |
before 1.28.7-20.el9.tuxcare.els1 | 1.28.7-20.el9.tuxcare.els1 |
cups-filtersDebian:12 |
before 1.28.17-3+deb12u2, plus listed versions 1.28.17-31.28.17-3+deb12u1 |
1.28.17-3+deb12u2 |
cups-filtersDebian:13 |
before 1.28.17-6+deb13u1, plus listed versions 1.28.17-6 |
1.28.17-6+deb13u1 |
cups-filtersDebian:14 |
before 1.28.17-7, plus listed versions 1.28.17-6 |
1.28.17-7 |
cups-filtersDebian:11 From an advisory covering 3 CVEs |
before 1.28.7-1+deb11u4, plus listed versions 1.28.7-11.28.7-1+deb11u11.28.7-1+deb11u21.28.7-1+deb11u3 |
1.28.7-1+deb11u4 |
Show 24 moreShow less
| Package | Affected | Fixed |
|---|---|---|
cups-filtersMageia:9 |
before 1.28.16-6.3.mga9 | 1.28.16-6.3.mga9 |
cups-filtersopenEuler:24.03-LTS-SP1 |
before 1.28.15-6.oe2403sp1 | 1.28.15-6.oe2403sp1 |
cups-filtersopenEuler:20.03-LTS-SP4 |
before 1.26.1-8.oe2003sp4 | 1.26.1-8.oe2003sp4 |
cups-filtersopenEuler:22.03-LTS-SP3 |
before 1.28.9-7.oe2203sp3 | 1.28.9-7.oe2203sp3 |
cups-filtersopenEuler:22.03-LTS-SP4 |
before 1.28.9-7.oe2203sp4 | 1.28.9-7.oe2203sp4 |
cups-filtersopenEuler:24.03-LTS |
before 1.28.15-6.oe2403 | 1.28.15-6.oe2403 |
cups-filtersopenEuler:24.03-LTS-SP2 |
before 1.28.15-6.oe2403sp2 | 1.28.15-6.oe2403sp2 |
cups-filtersSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 3 CVEs |
before 1.25.0-150200.3.25.1 | 1.25.0-150200.3.25.1 |
cups-filtersSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 3 CVEs |
before 1.25.0-150200.3.25.1 | 1.25.0-150200.3.25.1 |
cups-filtersopenSUSE:Leap 15.6 From an advisory covering 3 CVEs |
before 1.25.0-150200.3.25.1 | 1.25.0-150200.3.25.1 |
cups-filtersSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 3 CVEs |
before 1.0.58-19.35.1 | 1.0.58-19.35.1 |
cups-filtersUbuntu:Pro:16.04:LTS |
before 1.8.3-2ubuntu3.5+esm3, plus listed versions 1.0.76-11.1.0-11.1.0-1build11.3.0-11.4.0-1 Show 16 moreShow less1.5.0-11.6.0-11.7.0-11.8.1-11.8.2-11.8.2-21.8.2-2ubuntu21.8.2-2ubuntu31.8.3-2ubuntu11.8.3-2ubuntu21.8.3-2ubuntu31.8.3-2ubuntu3.11.8.3-2ubuntu3.41.8.3-2ubuntu3.51.8.3-2ubuntu3.5+esm11.8.3-2ubuntu3.5+esm2 |
1.8.3-2ubuntu3.5+esm3 |
cups-filtersUbuntu:Pro:18.04:LTS |
before 1.20.2-0ubuntu3.3+esm2, plus listed versions 1.17.9-0ubuntu11.17.9-11.20.0-21.20.1-11.20.1-1build1 Show 6 moreShow less1.20.2-0ubuntu11.20.2-0ubuntu21.20.2-0ubuntu31.20.2-0ubuntu3.11.20.2-0ubuntu3.31.20.2-0ubuntu3.3+esm1 |
1.20.2-0ubuntu3.3+esm2 |
cups-filtersUbuntu:Pro:20.04:LTS |
before 1.27.4-1ubuntu0.4+esm1, plus listed versions 1.25.11-0ubuntu11.25.11-11.25.12-11.25.13-11.26.0-1 Show 13 moreShow less1.26.1-11.26.2-11.27.0-11.27.0-21.27.1-11.27.1-21.27.1-31.27.2-11.27.3-11.27.4-11.27.4-1ubuntu0.21.27.4-1ubuntu0.31.27.4-1ubuntu0.4 |
1.27.4-1ubuntu0.4+esm1 |
cups-filtersUbuntu:22.04:LTS |
before 1.28.15-0ubuntu1.5, plus listed versions 1.28.10-21.28.11-11.28.11-21.28.12-11.28.13-0ubuntu1 Show 5 moreShow less1.28.14-11.28.15-0ubuntu11.28.15-0ubuntu1.21.28.15-0ubuntu1.31.28.15-0ubuntu1.4 |
1.28.15-0ubuntu1.5 |
cups-filtersUbuntu:24.04:LTS |
before 2.0.0-0ubuntu4.1, plus listed versions 2.0.0-0ubuntu12.0.0-0ubuntu32.0.0-0ubuntu4 |
2.0.0-0ubuntu4.1 |
cups-filtersUbuntu:25.10 |
before 2.0.1-0ubuntu3.25.10.1, plus listed versions 2.0.1-0ubuntu3 |
2.0.1-0ubuntu3.25.10.1 |
cups-filtersUbuntu:Pro:16.04:LTS From an advisory covering 3 CVEs |
before 1.8.3-2ubuntu3.5+esm3, plus listed versions 1.0.76-11.1.0-11.1.0-1build11.3.0-11.4.0-1 Show 16 moreShow less1.5.0-11.6.0-11.7.0-11.8.1-11.8.2-11.8.2-21.8.2-2ubuntu21.8.2-2ubuntu31.8.3-2ubuntu11.8.3-2ubuntu21.8.3-2ubuntu31.8.3-2ubuntu3.11.8.3-2ubuntu3.41.8.3-2ubuntu3.51.8.3-2ubuntu3.5+esm11.8.3-2ubuntu3.5+esm2 |
1.8.3-2ubuntu3.5+esm3 |
cups-filtersUbuntu:Pro:18.04:LTS From an advisory covering 3 CVEs |
before 1.20.2-0ubuntu3.3+esm2, plus listed versions 1.17.9-0ubuntu11.17.9-11.20.0-21.20.1-11.20.1-1build1 Show 6 moreShow less1.20.2-0ubuntu11.20.2-0ubuntu21.20.2-0ubuntu31.20.2-0ubuntu3.11.20.2-0ubuntu3.31.20.2-0ubuntu3.3+esm1 |
1.20.2-0ubuntu3.3+esm2 |
cups-filtersUbuntu:Pro:20.04:LTS From an advisory covering 3 CVEs |
before 1.27.4-1ubuntu0.4+esm1, plus listed versions 1.25.11-0ubuntu11.25.11-11.25.12-11.25.13-11.26.0-1 Show 13 moreShow less1.26.1-11.26.2-11.27.0-11.27.0-21.27.1-11.27.1-21.27.1-31.27.2-11.27.3-11.27.4-11.27.4-1ubuntu0.21.27.4-1ubuntu0.31.27.4-1ubuntu0.4 |
1.27.4-1ubuntu0.4+esm1 |
cups-filtersUbuntu:22.04:LTS From an advisory covering 3 CVEs |
before 1.28.15-0ubuntu1.5, plus listed versions 1.28.10-21.28.11-11.28.11-21.28.12-11.28.13-0ubuntu1 Show 5 moreShow less1.28.14-11.28.15-0ubuntu11.28.15-0ubuntu1.21.28.15-0ubuntu1.31.28.15-0ubuntu1.4 |
1.28.15-0ubuntu1.5 |
cups-filtersUbuntu:24.04:LTS From an advisory covering 3 CVEs |
before 2.0.0-0ubuntu4.1, plus listed versions 2.0.0-0ubuntu12.0.0-0ubuntu32.0.0-0ubuntu4 |
2.0.0-0ubuntu4.1 |
cups-filtersUbuntu:25.10 From an advisory covering 3 CVEs |
before 2.0.1-0ubuntu3.25.10.1, plus listed versions 2.0.1-0ubuntu3 |
2.0.1-0ubuntu3.25.10.1 |
cups-filtersUbuntu:25.04 |
before 2.0.1-0ubuntu3.25.04.1, plus listed versions 2.0.1-0ubuntu12.0.1-0ubuntu22.0.1-0ubuntu3 |
2.0.1-0ubuntu3.25.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-64524 is a low vulnerability (CVSS 3.3) in Openprinting Cups-filters, published November 20, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.22%, the 12th percentile. Fixed in cups-filters 1.28.7-11.el9_2.1.tuxcare.els4.
References
github.com/OpenPrinting/cups-filters/security/advisories/GHSA-rq44-2q5p-x3hv
openwall.com/lists/oss-security/2025/11/20/1
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1768210495.html
Show 24 moreShow less
nvd.nist.gov/vuln/detail/CVE-2025-64524
security-tracker.debian.org/tracker/CVE-2025-64524
advisories.mageia.org/MGASA-2025-0312.html
bugs.mageia.org/show_bug.cgi?id=34761
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-2751
suse.com/support/update/announcement/2025/suse-su-20254158-1
bugzilla.suse.com/1253364
ubuntu.com/security/CVE-2025-64524
cve.org/CVERecord?id=CVE-2025-64524