CVE-2025-64524
Low · 3.3CVSS
3.3
EPSS
0.2%
Published
Nov 20, 2025
CISA due date
—
The record
CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code Execution
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Mageia:9 | cups-filters | 0 | 1.28.16-6.3.mga9 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | cups-filters | 0 | 1.25.0-150200.3.25.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | cups-filters | 0 | 1.25.0-150200.3.25.1 |
| openSUSE:Leap 15.6 | cups-filters | 0 | 1.25.0-150200.3.25.1 |
Related vulnerabilities
- CVE-2025-64503 [BIGSLEEP-434615384] cups-filters 1.x: out of bounds write in pdftoraster Also affects cups-filters
- CVE-2025-57812 [BIGSLEEP-434612419] CUPS-Filters has heap-buffer-overflow write in `cfImageLut()` Also affects cups-filters
- CVE-2024-47176 CUPS is a standards-based, open-source printing system, and `cups-browsed` contains… Also affects cups-filters
- CVE-2024-47076 CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the… Also affects cups-filters
- CVE-2024-47175 CUPS is a standards-based, open-source printing system, and `libppd` can be used for… Also affects cups-filters
- CVE-2024-47177 CUPS is a standards-based, open-source printing system, and cups-filters provides… Also affects cups-filters
- CVE-2024-47850 CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination… Also affects cups-filters
- CVE-2026-112403 Pillow is a Python imaging library. CWE-122