CVE-2025-64503 — Out-of-bounds Write in Cups-filters
Severity
3.3LOWNVD
CNA4.0
EPSS
0.0%
top 93.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedNov 12
Latest updateNov 20
Description
cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In cups-filters prior to 1.28.18, by crafting a PDF file with a large `MediaBox` value, an attacker can cause CUPS-Filter 1.x’s `pdftoraster` tool to write beyond the bounds of an array. First, a PDF with a large `MediaBox` width value causes `header.cupsWidth` to become large. Next, the calculation of `bytesPerLine = (header.cupsBitsPerPixel * head…
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:LExploitability: 1.8 | Impact: 1.4
Affected Packages5 packages
Patches
🔴Vulnerability Details
4OSV▶
CVE-2025-64503: cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos↗2025-11-12
📋Vendor Advisories
4Debian▶
CVE-2025-64503: cups-filters - cups-filters contains backends, filters, and other software required to get the ...↗2025