CVE-2025-64503: cups-filters before 1.28.18 (exclusive), cups-filters < 1.28.18, libcupsfilters >= 2.0.0, < 2.1.2; +1 more affected…

Affected technology

cups-filters · before 1.28.18 (exclusive)
openprinting

libcupsfilters · from 2.0.0 (inclusive), before 2.1.2 (exclusive)
openprinting

cups-filters · cups-filters < 1.28.18, libcupsfilters >= 2.0.0, < 2.1.2
OpenPrinting

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Local · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · No privileges required · User interaction required

What an attacker can do

An attacker can cause CUPS-Filter 1.x’s `pdftoraster` tool to write beyond the bounds of an array. Vendor/CNA’s CVSS 3.1 assessment (base score 4.0/10) rates confidentiality and integrity impact as none; availability impact as low. NVD’s CVSS 3.1 assessment (base score 3.3/10) rates confidentiality and integrity impact as none; availability impact as low.