Skip to content
OpenAdvisories
Medium USN-7877-1 2 CVEs

libcupsfilters vulnerabilities

Published Nov 20, 2025 · Updated Apr 22, 2026

Summary

It was discovered that libcupsfilters incorrectly handled certain malformed
TIFF image files. A remote attacker could use this issue to cause
libcupsfilters to crash, resulting in a denial of service, or possibly
execute arbitrary code. (CVE-2025-57812)

It was discovered that libcupsfilters incorrectly handled certain malformed
PDF document files. A remote attacker could use this issue to cause
libcupsfilters to crash, resulting in a denial of service, or possibly
execute arbitrary code. (CVE-2025-64503)

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 24.04 LTS 24.04:LTS libcupsfilters 2.0.0-0ubuntu7.2
Ubuntu · 25.10 libcupsfilters 2.1.1-0ubuntu3.1

Vulnerabilities 2

  • Medium 4.0

    [BIGSLEEP-434615384] cups-filters 1.x: out of bounds write in pdftoraster

    cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In cups-filters prior to 1.28.18, by crafting a PDF file with a large `MediaBox` value, an attacker can cause …

  • Low 3.7

    [BIGSLEEP-434612419] CUPS-Filters has heap-buffer-overflow write in `cfImageLut()`

    CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used for the data format conversion tasks needed in Printer Applications. In CUPS-Fil…

References

  • report
    https://ubuntu.com/security/CVE-2025-57812
  • report
    https://ubuntu.com/security/CVE-2025-64503