{"id":"CVE-2025-64524","aliases":["CLSA-2026-1768210495","CLSA-2026-1768556132","DEBIAN-CVE-2025-64524","DLA-4380-1","EUVD-2025-198342","GHSA-rq44-2q5p-x3hv","MGASA-2025-0312","OESA-2025-2751","OESA-2026-1119","OESA-2026-1120","OESA-2026-1121","OESA-2026-1122","OESA-2026-1123","SUSE-SU-2025:4158-1","SUSE-SU-2025:4198-1","UBUNTU-CVE-2025-64524","USN-7878-1","USN-7878-2"],"status":"published","title":"CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code Execution","description":"cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00222,"percentile":0.12922,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122","CWE-787"],"published":"2025-11-20T15:00:00Z","modified":"2026-10-28T02:31:05Z","fixes":[{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"cups-filters","fixed_in":["1.28.7-11.el9_2.1.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"cups-filters-devel","fixed_in":["1.28.7-11.el9_2.1.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"cups-filters-libs","fixed_in":["1.28.7-11.el9_2.1.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"cups-filters","fixed_in":["1.28.7-20.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"cups-filters-devel","fixed_in":["1.28.7-20.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"cups-filters-libs","fixed_in":["1.28.7-20.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"cups-filters","fixed_in":["1.28.17-3+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cups-filters","fixed_in":["1.28.17-6+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cups-filters","fixed_in":["1.28.17-7"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"cups-filters","fixed_in":["1.28.16-6.3.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"cups-filters","fixed_in":["1.28.15-6.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"cups-filters","fixed_in":["1.26.1-8.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"cups-filters","fixed_in":["1.28.9-7.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"cups-filters","fixed_in":["1.28.9-7.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"cups-filters","fixed_in":["1.28.15-6.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"cups-filters","fixed_in":["1.28.15-6.oe2403sp2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cups-filters","fixed_in":["1.8.3-2ubuntu3.5+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"cups-filters","fixed_in":["1.20.2-0ubuntu3.3+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"cups-filters","fixed_in":["1.27.4-1ubuntu0.4+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"cups-filters","fixed_in":["1.28.15-0ubuntu1.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"cups-filters","fixed_in":["2.0.0-0ubuntu4.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"cups-filters","fixed_in":["2.0.1-0ubuntu3.25.10.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.04","package":"cups-filters","fixed_in":["2.0.1-0ubuntu3.25.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.7-11.el9_2.1.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cups-filters-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.7-11.el9_2.1.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"cups-filters-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.7-11.el9_2.1.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.7-20.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cups-filters-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.7-20.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cups-filters-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.7-20.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.17-3+deb12u2"}]}],"versions":["1.28.17-3","1.28.17-3+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.17-6+deb13u1"}]}],"versions":["1.28.17-6"]},{"source":"osv","ecosystem":"Debian:14","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.17-7"}]}],"versions":["1.28.17-6"]},{"source":"osv","ecosystem":"Debian:11","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.7-1+deb11u4"}]}],"versions":["1.28.7-1","1.28.7-1+deb11u1","1.28.7-1+deb11u2","1.28.7-1+deb11u3"],"bundled":3},{"source":"osv","ecosystem":"Mageia:9","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.16-6.3.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.15-6.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.1-8.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.9-7.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.9-7.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.15-6.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.15-6.oe2403sp2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.0-150200.3.25.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.0-150200.3.25.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.0-150200.3.25.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.58-19.35.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-2ubuntu3.5+esm3"}]}],"versions":["1.0.76-1","1.1.0-1","1.1.0-1build1","1.3.0-1","1.4.0-1","1.5.0-1","1.6.0-1","1.7.0-1","1.8.1-1","1.8.2-1","1.8.2-2","1.8.2-2ubuntu2","1.8.2-2ubuntu3","1.8.3-2ubuntu1","1.8.3-2ubuntu2","1.8.3-2ubuntu3","1.8.3-2ubuntu3.1","1.8.3-2ubuntu3.4","1.8.3-2ubuntu3.5","1.8.3-2ubuntu3.5+esm1","1.8.3-2ubuntu3.5+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.2-0ubuntu3.3+esm2"}]}],"versions":["1.17.9-0ubuntu1","1.17.9-1","1.20.0-2","1.20.1-1","1.20.1-1build1","1.20.2-0ubuntu1","1.20.2-0ubuntu2","1.20.2-0ubuntu3","1.20.2-0ubuntu3.1","1.20.2-0ubuntu3.3","1.20.2-0ubuntu3.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.27.4-1ubuntu0.4+esm1"}]}],"versions":["1.25.11-0ubuntu1","1.25.11-1","1.25.12-1","1.25.13-1","1.26.0-1","1.26.1-1","1.26.2-1","1.27.0-1","1.27.0-2","1.27.1-1","1.27.1-2","1.27.1-3","1.27.2-1","1.27.3-1","1.27.4-1","1.27.4-1ubuntu0.2","1.27.4-1ubuntu0.3","1.27.4-1ubuntu0.4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.15-0ubuntu1.5"}]}],"versions":["1.28.10-2","1.28.11-1","1.28.11-2","1.28.12-1","1.28.13-0ubuntu1","1.28.14-1","1.28.15-0ubuntu1","1.28.15-0ubuntu1.2","1.28.15-0ubuntu1.3","1.28.15-0ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-0ubuntu4.1"}]}],"versions":["2.0.0-0ubuntu1","2.0.0-0ubuntu3","2.0.0-0ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-0ubuntu3.25.10.1"}]}],"versions":["2.0.1-0ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-2ubuntu3.5+esm3"}]}],"versions":["1.0.76-1","1.1.0-1","1.1.0-1build1","1.3.0-1","1.4.0-1","1.5.0-1","1.6.0-1","1.7.0-1","1.8.1-1","1.8.2-1","1.8.2-2","1.8.2-2ubuntu2","1.8.2-2ubuntu3","1.8.3-2ubuntu1","1.8.3-2ubuntu2","1.8.3-2ubuntu3","1.8.3-2ubuntu3.1","1.8.3-2ubuntu3.4","1.8.3-2ubuntu3.5","1.8.3-2ubuntu3.5+esm1","1.8.3-2ubuntu3.5+esm2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.2-0ubuntu3.3+esm2"}]}],"versions":["1.17.9-0ubuntu1","1.17.9-1","1.20.0-2","1.20.1-1","1.20.1-1build1","1.20.2-0ubuntu1","1.20.2-0ubuntu2","1.20.2-0ubuntu3","1.20.2-0ubuntu3.1","1.20.2-0ubuntu3.3","1.20.2-0ubuntu3.3+esm1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.27.4-1ubuntu0.4+esm1"}]}],"versions":["1.25.11-0ubuntu1","1.25.11-1","1.25.12-1","1.25.13-1","1.26.0-1","1.26.1-1","1.26.2-1","1.27.0-1","1.27.0-2","1.27.1-1","1.27.1-2","1.27.1-3","1.27.2-1","1.27.3-1","1.27.4-1","1.27.4-1ubuntu0.2","1.27.4-1ubuntu0.3","1.27.4-1ubuntu0.4"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.15-0ubuntu1.5"}]}],"versions":["1.28.10-2","1.28.11-1","1.28.11-2","1.28.12-1","1.28.13-0ubuntu1","1.28.14-1","1.28.15-0ubuntu1","1.28.15-0ubuntu1.2","1.28.15-0ubuntu1.3","1.28.15-0ubuntu1.4"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-0ubuntu4.1"}]}],"versions":["2.0.0-0ubuntu1","2.0.0-0ubuntu3","2.0.0-0ubuntu4"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-0ubuntu3.25.10.1"}]}],"versions":["2.0.1-0ubuntu3"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:25.04","package":"cups-filters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1-0ubuntu3.25.04.1"}]}],"versions":["2.0.1-0ubuntu1","2.0.1-0ubuntu2","2.0.1-0ubuntu3"]}],"products":[{"vendor":"openprinting","product":"cups-filters"}],"references":[{"url":"https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-rq44-2q5p-x3hv","tags":["x_refsource_CONFIRM","exploit","Exploit","Vendor Advisory","advisory","report"]},{"url":"https://github.com/OpenPrinting/cups-filters/commit/956283c74a34ae924266a2a63f8e5f529a1abd06","tags":["x_refsource_MISC","Patch","fix"]},{"url":"http://www.openwall.com/lists/oss-security/2025/11/20/1","tags":["Mailing List","Patch","web"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1768210495.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1768556132.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/64xxx/CVE-2025-64524.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-64524","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-64524","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0312.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34761","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2025/11/20/1","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2751","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1119","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1120","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1121","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1122","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1123","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254158-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1253364","tags":["report"]},{"url":"https://bugzilla.suse.com/1253373","tags":["report"]},{"url":"https://bugzilla.suse.com/1253374","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-57812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-64524","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254198-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-64524","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-64524","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7878-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7878-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-57812","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-64503","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2025-64524","title":"CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code Execution","description":"cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.","status":"published","published":"2025-11-20T18:05:06.236Z","modified":"2025-11-21T16:06:49.862Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:32:46.750177Z"}],"euvd":[{"id":"EUVD-2025-198342","description":"cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.","status":"published","published":"2025-11-20T18:05:06Z","modified":"2025-11-21T16:06:49Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T19:49:13.665045Z"}],"nvd":[{"id":"CVE-2025-64524","description":"cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.","status":"published","published":"2025-11-20T18:15:51.25Z","modified":"2026-10-18T20:10:00.11Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T14:11:46.009629Z"}],"osv":[{"id":"CVE-2025-64524","title":"CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code Execution","description":"cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.","status":"published","published":"2025-11-20T18:05:06.236Z","modified":"2026-10-28T02:31:05.715759922Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:44:51.851511Z"},{"id":"DEBIAN-CVE-2025-64524","description":"cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.","status":"published","published":"2025-11-20T18:15:51.25Z","modified":"2026-10-23T17:47:23.785907937Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:47.697959Z"},{"id":"OESA-2025-2751","title":"cups-filters security update","description":"This project provides backends, filters, and other software that was once part of the core CUPS distribution but is no longer maintained by Apple Inc. In addition it contains additional filters and software developed independently of Apple, especially filters for the PDF-centric printing workflow introduced by OpenPrinting and a daemon to browse Bonjour broadcasts of remote CUPS printers to make these printers available locally and to provide backward compatibility to the old CUPS broadcasting and browsing of CUPS 1.5.x and older.\r\n\r\nSecurity Fix(es):\n\ncups-filters contains backends, filters, and other software required to get the CUPS printing service working on operating systems other than macOS. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.(CVE-2025-64524)","status":"published","published":"2025-11-28T11:09:52Z","modified":"2026-08-18T01:19:21.013999666Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2026-1119","title":"cups-filters security update","description":"This project provides backends, filters, and other software that was once part of the core CUPS distribution but is no longer maintained by Apple Inc. In addition it contains additional filters and software developed independently of Apple, especially filters for the PDF-centric printing workflow introduced by OpenPrinting and a daemon to browse Bonjour broadcasts of remote CUPS printers to make these printers available locally and to provide backward compatibility to the old CUPS broadcasting and browsing of CUPS 1.5.x and older.\r\n\r\nSecurity Fix(es):\n\ncups-filters contains backends, filters, and other software required to get the CUPS printing service working on operating systems other than macOS. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.(CVE-2025-64524)","status":"published","published":"2026-01-16T11:10:09Z","modified":"2026-08-18T01:19:27.752798974Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2026-1120","title":"cups-filters security update","description":"This project provides backends, filters, and other software that was once part of the core CUPS distribution but is no longer maintained by Apple Inc. In addition it contains additional filters and software developed independently of Apple, especially filters for the PDF-centric printing workflow introduced by OpenPrinting and a daemon to browse Bonjour broadcasts of remote CUPS printers to make these printers available locally and to provide backward compatibility to the old CUPS broadcasting and browsing of CUPS 1.5.x and older.\r\n\r\nSecurity Fix(es):\n\ncups-filters contains backends, filters, and other software required to get the CUPS printing service working on operating systems other than macOS. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.(CVE-2025-64524)","status":"published","published":"2026-01-16T11:10:09Z","modified":"2026-08-18T01:19:27.780024208Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2026-1121","title":"cups-filters security update","description":"This project provides backends, filters, and other software that was once part of the core CUPS distribution but is no longer maintained by Apple Inc. In addition it contains additional filters and software developed independently of Apple, especially filters for the PDF-centric printing workflow introduced by OpenPrinting and a daemon to browse Bonjour broadcasts of remote CUPS printers to make these printers available locally and to provide backward compatibility to the old CUPS broadcasting and browsing of CUPS 1.5.x and older.\r\n\r\nSecurity Fix(es):\n\ncups-filters contains backends, filters, and other software required to get the CUPS printing service working on operating systems other than macOS. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.(CVE-2025-64524)","status":"published","published":"2026-01-16T11:10:09Z","modified":"2026-08-18T01:19:27.711540431Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2026-1122","title":"cups-filters security update","description":"This project provides backends, filters, and other software that was once part of the core CUPS distribution but is no longer maintained by Apple Inc. In addition it contains additional filters and software developed independently of Apple, especially filters for the PDF-centric printing workflow introduced by OpenPrinting and a daemon to browse Bonjour broadcasts of remote CUPS printers to make these printers available locally and to provide backward compatibility to the old CUPS broadcasting and browsing of CUPS 1.5.x and older.\r\n\r\nSecurity Fix(es):\n\ncups-filters contains backends, filters, and other software required to get the CUPS printing service working on operating systems other than macOS. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.(CVE-2025-64524)","status":"published","published":"2026-01-16T11:10:09Z","modified":"2026-08-18T01:19:27.735561805Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"OESA-2026-1123","title":"cups-filters security update","description":"This project provides backends, filters, and other software that was once part of the core CUPS distribution but is no longer maintained by Apple Inc. In addition it contains additional filters and software developed independently of Apple, especially filters for the PDF-centric printing workflow introduced by OpenPrinting and a daemon to browse Bonjour broadcasts of remote CUPS printers to make these printers available locally and to provide backward compatibility to the old CUPS broadcasting and browsing of CUPS 1.5.x and older.\r\n\r\nSecurity Fix(es):\n\ncups-filters contains backends, filters, and other software required to get the CUPS printing service working on operating systems other than macOS. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.(CVE-2025-64524)","status":"published","published":"2026-01-16T11:10:09Z","modified":"2026-08-18T01:19:27.852227065Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:45.339366Z"},{"id":"UBUNTU-CVE-2025-64524","description":"cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.","status":"published","published":"2025-11-20T15:00:00Z","modified":"2026-04-22T16:08:09.599792Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:55:52.345622Z"},{"id":"CLSA-2026-1768210495","title":"cups-filters: Fix of CVE-2025-64524","description":"- CVE-2025-64524: fix heap buffer overflow and infinite loop in rastertopclx when\n  processing maliciously crafted raster input","status":"published","published":"2026-01-12T09:34:59Z","modified":"2026-06-01T00:31:37.413110913Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1768556132","title":"cups-filters: Fix of CVE-2025-64524","description":"- CVE-2025-64524: fix heap buffer overflow and memory corruption via an\n  unvalidated length parameter in CompressData function of the rastertopclx filter","status":"published","published":"2026-01-16T09:35:36Z","modified":"2026-06-01T00:31:51.487603868Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"DLA-4380-1","title":"cups-filters - security update","status":"published","published":"2025-11-25T00:00:00Z","modified":"2025-11-25T19:33:46.75956Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2025-0312","title":"Updated cups-filters packages fix security vulnerability","description":"CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to\nPotential Arbitrary Code Execution. (CVE-2025-64524)\n","status":"published","published":"2025-11-24T19:08:36Z","modified":"2026-04-16T04:42:33.124063889Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"SUSE-SU-2025:4158-1","title":"Security update for cups-filters","description":"This update for cups-filters fixes the following issues:\n\n- CVE-2025-64503: Fixed out-of-bounds write in pdftoraster tool (bsc#1253374)\n- CVE-2025-57812: Fixed multiple TIFF-related issues in libcupsfilters (bsc#1253373)\n- CVE-2025-64524: Fixed out-of-bounds write de to use of unvalidated length parameter in the rastertopclx filter (bsc#1253364)\n","status":"published","published":"2025-11-21T14:30:38Z","modified":"2026-02-04T02:18:04.349086Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:4198-1","title":"Security update for cups-filters","description":"This update for cups-filters fixes the following issues:\n\n- CVE-2025-64503: Fixed out-of-bounds write in pdftoraster tool (bsc#1253374)\n- CVE-2025-57812: Fixed multiple TIFF-related issues in libcupsfilters (bsc#1253373)\n- CVE-2025-64524: Fixed out-of-bounds write de to use of unvalidated length parameter in the rastertopclx filter (bsc#1253364)\n","status":"published","published":"2025-11-24T11:59:54Z","modified":"2026-03-23T04:51:39.317502Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"USN-7878-1","title":"cups-filters vulnerabilities","description":"It was discovered that cups-filters incorrectly handled certain malformed\nTIFF image files. A remote attacker could use this issue to cause\ncups-filters to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. This issue only affected Ubuntu 16.04 LTS,\nUbuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2025-57812)\n\nIt was discovered that cups-filters incorrectly handled certain malformed\nPDF document files. A remote attacker could use this issue to cause\ncups-filters to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. This issue only affected Ubuntu 16.04 LTS,\nUbuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2025-64503)\n\nIt was discovered that cups-filters incorrectly handled certain malformed\nCUPS Raster files. A remote attacker could use this issue to cause\ncups-filters to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. (CVE-2025-64524)","status":"published","published":"2025-11-20T16:04:31Z","modified":"2026-06-25T13:32:31.450984536Z","updated_at":"2026-11-02T16:58:21.91885Z"},{"id":"USN-7878-2","title":"cups-filters vulnerabilities","description":"USN-7878-1 fixed vulnerabilities in cups-filters, This update provides the\ncorresponding update for CVE-2025-64524 for Ubuntu 25.04.\n\nOriginal advisory details:\n\n It was discovered that cups-filters incorrectly handled certain malformed\n TIFF image files. A remote attacker could use this issue to cause\n cups-filters to crash, resulting in a denial of service, or possibly\n execute arbitrary code. This issue only affected Ubuntu 16.04 LTS,\n Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2025-57812)\n\n It was discovered that cups-filters incorrectly handled certain malformed\n PDF document files. A remote attacker could use this issue to cause\n cups-filters to crash, resulting in a denial of service, or possibly\n execute arbitrary code. This issue only affected Ubuntu 16.04 LTS,\n Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2025-64503)\n\n It was discovered that cups-filters incorrectly handled certain malformed\n CUPS Raster files. A remote attacker could use this issue to cause\n cups-filters to crash, resulting in a denial of service, or possibly\n execute arbitrary code. (CVE-2025-64524)","status":"published","published":"2025-11-24T12:40:41.166717Z","modified":"2026-02-04T04:05:03.179272Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}