{
  "cveId": "CVE-2025-57812",
  "url": "https://patchblox.com/security/cve/CVE-2025-57812",
  "summary": "CVE-2025-57812 is fixed in 14 products on 1 platform, first by libcupsfilters-tests 2.0.0-0ubuntu7.2, released November 11, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "libcupsfilters-tests: CUPS is a standards-based, open-source printing system, and\u0060libcupsfilters\u0060 contains the code of the filters of the f...",
  "description": "CUPS is a standards-based, open-source printing system, and\u0060libcupsfilters\u0060 contains the code of the filters of the former\u0060cups-filters\u0060 package as library functions to be used for the data formatconversion tasks needed in Printer Applications. In CUPS-Filters versionsup to and including 1.28.17 and libscupsfilters versions 2.0.0 through2.1.1, CUPS-Filters\u0027s \u0060imagetoraster\u0060 filter has an out of boundsread/write vulnerability in the processing of TIFF image files.  While thepixel buffer is allocated with the number of pixels times a pre-calculatedbytes-per-pixel value, the function which processes these pixels is calledwith a size of the number of pixels times 3.  When suitable inputs arepassed, the bytes-per-pixel value can be set to 1 and bytes outside of thebuffer bounds get processed. In order to trigger the bug, an attacker mustissue a print job with a crafted TIFF file, and pass appropriate print joboptions to control the bytes-per-pixel value of the output format. Theymust choose a printer configuration under which the \u0060imagetoraster\u0060 filteror its C-function equivalent \u0060cfFilterImageToRaster()\u0060 gets invoked. Thevulnerability exists in both CUPS-Filters 1.x and the successor librarylibcupsfilters (CUPS-Filters 2.x). In CUPS-Filters 2.x, the vulnerablefunction is \u0060_cfImageReadTIFF() in libcupsfilters\u0060. When this function isinvoked as part of \u0060cfFilterImageToRaster()\u0060, the caller passes alook-up-table during whose processing the out of bounds memory accesshappens. In CUPS-Filters 1.x, the equivalent functions are all found in thecups-filters repository, which is not split into subprojects yet, and thevulnerable code is in \u0060_cupsImageReadTIFF()\u0060, which is called through\u0060cupsImageOpen()\u0060 from the \u0060imagetoraster\u0060 tool. A patch is available incommit b69dfacec7f176281782e2f7ac44f04bf9633cfa.",
  "published": "2025-11-11T16:00:00Z",
  "severity": "Medium",
  "cvss": 3.7,
  "cvssVector": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
  "epss": 0.00478,
  "epssPercentile": 0.41538,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "cups-browsed",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.20.2-0ubuntu3.3\u002Besm2",
      "fix": "cups-browsed 1.20.2-0ubuntu3.3\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-cups-browsed-1.20.2-0ubuntu3.3-esm2",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-browsed",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.27.4-1ubuntu0.4\u002Besm1",
      "fix": "cups-browsed 1.27.4-1ubuntu0.4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-cups-browsed-1.27.4-1ubuntu0.4-esm1",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-browsed",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.28.15-0ubuntu1.5",
      "fix": "cups-browsed 1.28.15-0ubuntu1.5",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-cups-browsed-1.28.15-0ubuntu1.5",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters",
      "release": "Debian 11.6 (bullseye)",
      "fixedVersion": "1.28.7-1\u002Bdeb11u4",
      "fix": "DLA-4380-1",
      "url": "https://patchblox.com/security/fix/linux/dla-4380-1",
      "released": "2025-11-25T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "1.28.17-3\u002Bdeb12u2",
      "fix": "DEBIAN-CVE-2025-57812",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-57812",
      "released": "2025-11-12T19:15:36Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "1.28.17-6\u002Bdeb13u1",
      "fix": "DEBIAN-CVE-2025-57812",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-57812",
      "released": "2025-11-12T19:15:36Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters",
      "release": "Debian 14",
      "fixedVersion": "1.28.17-7",
      "fix": "DEBIAN-CVE-2025-57812",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-57812",
      "released": "2025-11-12T19:15:36Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.20.2-0ubuntu3.3\u002Besm2",
      "fix": "cups-filters 1.20.2-0ubuntu3.3\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-cups-filters-1.20.2-0ubuntu3.3-esm2",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.27.4-1ubuntu0.4\u002Besm1",
      "fix": "cups-filters 1.27.4-1ubuntu0.4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-cups-filters-1.27.4-1ubuntu0.4-esm1",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.28.15-0ubuntu1.5",
      "fix": "cups-filters 1.28.15-0ubuntu1.5",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-cups-filters-1.28.15-0ubuntu1.5",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters",
      "release": "amzn 2023",
      "fixedVersion": "1.28.16-3.amzn2023.0.5",
      "fix": "ALAS2023-2025-1291",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1291",
      "released": "2025-12-08T12:37:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "1.25.0-150200.3.25.1",
      "fix": "SUSE-SU-2025:4158-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4158-1",
      "released": "2025-11-21T14:30:38Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters",
      "release": "sles 15.6",
      "fixedVersion": "1.25.0-150200.3.25.1",
      "fix": "SUSE-SU-2025:4158-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4158-1",
      "released": "2025-11-21T14:30:38Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters",
      "release": "sles 15.7",
      "fixedVersion": "1.25.0-150200.3.25.1",
      "fix": "SUSE-SU-2025:4158-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4158-1",
      "released": "2025-11-21T14:30:38Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters-core-drivers",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.20.2-0ubuntu3.3\u002Besm2",
      "fix": "cups-filters-core-drivers 1.20.2-0ubuntu3.3\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-cups-filters-core-drivers-1.20.2-0ubuntu3.3-esm2",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters-core-drivers",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.27.4-1ubuntu0.4\u002Besm1",
      "fix": "cups-filters-core-drivers 1.27.4-1ubuntu0.4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-cups-filters-core-drivers-1.27.4-1ubuntu0.4-esm1",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters-core-drivers",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.28.15-0ubuntu1.5",
      "fix": "cups-filters-core-drivers 1.28.15-0ubuntu1.5",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-cups-filters-core-drivers-1.28.15-0ubuntu1.5",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1.28.16-3.amzn2023.0.5",
      "fix": "ALAS2023-2025-1291",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1291",
      "released": "2025-12-08T12:37:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "1.28.16-3.amzn2023.0.5",
      "fix": "ALAS2023-2025-1291",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1291",
      "released": "2025-12-08T12:37:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters-devel",
      "release": "amzn 2023",
      "fixedVersion": "1.28.16-3.amzn2023.0.5",
      "fix": "ALAS2023-2025-1291",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1291",
      "released": "2025-12-08T12:37:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters-libs",
      "release": "amzn 2023",
      "fixedVersion": "1.28.16-3.amzn2023.0.5",
      "fix": "ALAS2023-2025-1291",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1291",
      "released": "2025-12-08T12:37:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters-libs-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1.28.16-3.amzn2023.0.5",
      "fix": "ALAS2023-2025-1291",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1291",
      "released": "2025-12-08T12:37:00Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "2.0.0-3\u002Bdeb13u1",
      "fix": "DEBIAN-CVE-2025-57812",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-57812",
      "released": "2025-11-12T19:15:36Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters",
      "release": "Debian 14",
      "fixedVersion": "2.1.1-2",
      "fix": "DEBIAN-CVE-2025-57812",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-57812",
      "released": "2025-11-12T19:15:36Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters-tests",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "2.0.0-0ubuntu7.2",
      "fix": "libcupsfilters-tests 2.0.0-0ubuntu7.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libcupsfilters-tests-2.0.0-0ubuntu7.2",
      "released": "2025-11-11T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters-tests",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2.1.1-0ubuntu2.1",
      "fix": "libcupsfilters-tests 2.1.1-0ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libcupsfilters-tests-2.1.1-0ubuntu2.1",
      "released": "2025-11-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters-tests",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "2.1.1-0ubuntu3.1",
      "fix": "libcupsfilters-tests 2.1.1-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-libcupsfilters-tests-2.1.1-0ubuntu3.1",
      "released": "2025-11-11T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters1",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.20.2-0ubuntu3.3\u002Besm2",
      "fix": "libcupsfilters1 1.20.2-0ubuntu3.3\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libcupsfilters1-1.20.2-0ubuntu3.3-esm2",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters1",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.27.4-1ubuntu0.4\u002Besm1",
      "fix": "libcupsfilters1 1.27.4-1ubuntu0.4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libcupsfilters1-1.27.4-1ubuntu0.4-esm1",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters1",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.28.15-0ubuntu1.5",
      "fix": "libcupsfilters1 1.28.15-0ubuntu1.5",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libcupsfilters1-1.28.15-0ubuntu1.5",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters2-common",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "2.0.0-0ubuntu7.2",
      "fix": "libcupsfilters2-common 2.0.0-0ubuntu7.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libcupsfilters2-common-2.0.0-0ubuntu7.2",
      "released": "2025-11-11T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters2-common",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2.1.1-0ubuntu2.1",
      "fix": "libcupsfilters2-common 2.1.1-0ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libcupsfilters2-common-2.1.1-0ubuntu2.1",
      "released": "2025-11-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters2-common",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "2.1.1-0ubuntu3.1",
      "fix": "libcupsfilters2-common 2.1.1-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-libcupsfilters2-common-2.1.1-0ubuntu3.1",
      "released": "2025-11-11T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters2t64",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "2.0.0-0ubuntu7.2",
      "fix": "libcupsfilters2t64 2.0.0-0ubuntu7.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libcupsfilters2t64-2.0.0-0ubuntu7.2",
      "released": "2025-11-11T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters2t64",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2.1.1-0ubuntu2.1",
      "fix": "libcupsfilters2t64 2.1.1-0ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libcupsfilters2t64-2.1.1-0ubuntu2.1",
      "released": "2025-11-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters2t64",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "2.1.1-0ubuntu3.1",
      "fix": "libcupsfilters2t64 2.1.1-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-libcupsfilters2t64-2.1.1-0ubuntu3.1",
      "released": "2025-11-11T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libfontembed1",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.20.2-0ubuntu3.3\u002Besm2",
      "fix": "libfontembed1 1.20.2-0ubuntu3.3\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libfontembed1-1.20.2-0ubuntu3.3-esm2",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libfontembed1",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.27.4-1ubuntu0.4\u002Besm1",
      "fix": "libfontembed1 1.27.4-1ubuntu0.4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libfontembed1-1.27.4-1ubuntu0.4-esm1",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libfontembed1",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.28.15-0ubuntu1.5",
      "fix": "libfontembed1 1.28.15-0ubuntu1.5",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libfontembed1-1.28.15-0ubuntu1.5",
      "released": "2025-11-20T07:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T13:31:49Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}