Skip to content
OpenAdvisories
Low USN-7878-2 1 CVE

cups-filters vulnerabilities

Published Nov 24, 2025 · Updated Feb 4, 2026

Summary

USN-7878-1 fixed vulnerabilities in cups-filters, This update provides the
corresponding update for CVE-2025-64524 for Ubuntu 25.04.

Original advisory details:

It was discovered that cups-filters incorrectly handled certain malformed
TIFF image files. A remote attacker could use this issue to cause
cups-filters to crash, resulting in a denial of service, or possibly
execute arbitrary code. This issue only affected Ubuntu 16.04 LTS,
Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2025-57812)

It was discovered that cups-filters incorrectly handled certain malformed
PDF document files. A remote attacker could use this issue to cause
cups-filters to crash, resulting in a denial of service, or possibly
execute arbitrary code. This issue only affected Ubuntu 16.04 LTS,
Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2025-64503)

It was discovered that cups-filters incorrectly handled certain malformed
CUPS Raster files. A remote attacker could use this issue to cause
cups-filters to crash, resulting in a denial of service, or possibly
execute arbitrary code. (CVE-2025-64524)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 25.04 cups-filters 2.0.1-0ubuntu3.25.04.1

Vulnerabilities 1

  • Low 3.3

    CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code Execution

    cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the progra…

References

  • report
    https://ubuntu.com/security/CVE-2025-64524