CVE-2025-64524 — Heap-based Buffer Overflow in Cups-filters
Severity
5.5MEDIUMNVD
CNA3.3OSV3.7
EPSS
0.0%
top 90.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 20
Latest updateNov 24
Description
cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages4 packages
Patches
🔴Vulnerability Details
3CVEList▶
CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code Execution↗2025-11-20
OSV▶
CVE-2025-64524: cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos↗2025-11-20