{
  "cveId": "CVE-2025-64503",
  "url": "https://patchblox.com/security/cve/CVE-2025-64503",
  "summary": "CVE-2025-64503 is fixed in 14 products on 1 platform, first by libcupsfilters-tests 2.0.0-0ubuntu7.2, released November 11, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "libcupsfilters-tests: cups-filters contains backends, filters, and other software required to getthe cups printing service working on opera...",
  "description": "cups-filters contains backends, filters, and other software required to getthe cups printing service working on operating systems other than macos. Incups-filters prior to 1.28.18, by crafting a PDF file with a large\u0060MediaBox\u0060 value, an attacker can cause CUPS-Filter 1.x\u2019s \u0060pdftoraster\u0060tool to write beyond the bounds of an array. First, a PDF with a large\u0060MediaBox\u0060 width value causes \u0060header.cupsWidth\u0060 to become large.  Next,the calculation of \u0060bytesPerLine = (header.cupsBitsPerPixel *header.cupsWidth \u002B 7) / 8\u0060 overflows, resulting in a small value. Then,\u0060lineBuf\u0060 is allocated with the small \u0060bytesPerLine\u0060 size. Finally,\u0060convertLineChunked\u0060 calls \u0060writePixel8\u0060, which attempts to write to\u0060lineBuf\u0060 outside of its buffer size (out of bounds write). Inlibcupsfilters, the maintainers found the same \u0060bytesPerLine\u0060multiplication without overflow check, but the provided test case does notcause an overflow there, because the values are different. Commit50d94ca0f2fa6177613c97c59791bde568631865 contains a patch, which isincorporated into cups-filters version 1.28.18.",
  "published": "2025-11-11T16:00:00Z",
  "severity": "Medium",
  "cvss": 3.3,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
  "epss": 0.00228,
  "epssPercentile": 0.13681,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "cups-browsed",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.20.2-0ubuntu3.3\u002Besm2",
      "fix": "cups-browsed 1.20.2-0ubuntu3.3\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-cups-browsed-1.20.2-0ubuntu3.3-esm2",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-browsed",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.27.4-1ubuntu0.4\u002Besm1",
      "fix": "cups-browsed 1.27.4-1ubuntu0.4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-cups-browsed-1.27.4-1ubuntu0.4-esm1",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-browsed",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.28.15-0ubuntu1.5",
      "fix": "cups-browsed 1.28.15-0ubuntu1.5",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-cups-browsed-1.28.15-0ubuntu1.5",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "1.28.17-3\u002Bdeb12u2",
      "fix": "DEBIAN-CVE-2025-64503",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-64503",
      "released": "2025-11-12T22:15:50Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "1.28.17-6\u002Bdeb13u1",
      "fix": "DEBIAN-CVE-2025-64503",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-64503",
      "released": "2025-11-12T22:15:50Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters",
      "release": "Debian 14",
      "fixedVersion": "1.28.17-7",
      "fix": "DEBIAN-CVE-2025-64503",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-64503",
      "released": "2025-11-12T22:15:50Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.20.2-0ubuntu3.3\u002Besm2",
      "fix": "cups-filters 1.20.2-0ubuntu3.3\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-cups-filters-1.20.2-0ubuntu3.3-esm2",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.27.4-1ubuntu0.4\u002Besm1",
      "fix": "cups-filters 1.27.4-1ubuntu0.4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-cups-filters-1.27.4-1ubuntu0.4-esm1",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.28.15-0ubuntu1.5",
      "fix": "cups-filters 1.28.15-0ubuntu1.5",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-cups-filters-1.28.15-0ubuntu1.5",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters",
      "release": "amzn 2023",
      "fixedVersion": "1.28.16-3.amzn2023.0.5",
      "fix": "ALAS2023-2025-1291",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1291",
      "released": "2025-12-08T12:37:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "1.25.0-150200.3.25.1",
      "fix": "SUSE-SU-2025:4158-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4158-1",
      "released": "2025-11-21T14:30:38Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters",
      "release": "sles 15.6",
      "fixedVersion": "1.25.0-150200.3.25.1",
      "fix": "SUSE-SU-2025:4158-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4158-1",
      "released": "2025-11-21T14:30:38Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters",
      "release": "sles 15.7",
      "fixedVersion": "1.25.0-150200.3.25.1",
      "fix": "SUSE-SU-2025:4158-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4158-1",
      "released": "2025-11-21T14:30:38Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters-core-drivers",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.20.2-0ubuntu3.3\u002Besm2",
      "fix": "cups-filters-core-drivers 1.20.2-0ubuntu3.3\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-cups-filters-core-drivers-1.20.2-0ubuntu3.3-esm2",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters-core-drivers",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.27.4-1ubuntu0.4\u002Besm1",
      "fix": "cups-filters-core-drivers 1.27.4-1ubuntu0.4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-cups-filters-core-drivers-1.27.4-1ubuntu0.4-esm1",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters-core-drivers",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.28.15-0ubuntu1.5",
      "fix": "cups-filters-core-drivers 1.28.15-0ubuntu1.5",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-cups-filters-core-drivers-1.28.15-0ubuntu1.5",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1.28.16-3.amzn2023.0.5",
      "fix": "ALAS2023-2025-1291",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1291",
      "released": "2025-12-08T12:37:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "1.28.16-3.amzn2023.0.5",
      "fix": "ALAS2023-2025-1291",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1291",
      "released": "2025-12-08T12:37:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters-devel",
      "release": "amzn 2023",
      "fixedVersion": "1.28.16-3.amzn2023.0.5",
      "fix": "ALAS2023-2025-1291",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1291",
      "released": "2025-12-08T12:37:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters-libs",
      "release": "amzn 2023",
      "fixedVersion": "1.28.16-3.amzn2023.0.5",
      "fix": "ALAS2023-2025-1291",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1291",
      "released": "2025-12-08T12:37:00Z"
    },
    {
      "platform": "linux",
      "product": "cups-filters-libs-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1.28.16-3.amzn2023.0.5",
      "fix": "ALAS2023-2025-1291",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1291",
      "released": "2025-12-08T12:37:00Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "2.0.0-3\u002Bdeb13u1",
      "fix": "DEBIAN-CVE-2025-64503",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-64503",
      "released": "2025-11-12T22:15:50Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters",
      "release": "Debian 14",
      "fixedVersion": "2.1.1-2",
      "fix": "DEBIAN-CVE-2025-64503",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-64503",
      "released": "2025-11-12T22:15:50Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters-tests",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "2.0.0-0ubuntu7.2",
      "fix": "libcupsfilters-tests 2.0.0-0ubuntu7.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libcupsfilters-tests-2.0.0-0ubuntu7.2",
      "released": "2025-11-11T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters-tests",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2.1.1-0ubuntu2.1",
      "fix": "libcupsfilters-tests 2.1.1-0ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libcupsfilters-tests-2.1.1-0ubuntu2.1",
      "released": "2025-11-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters-tests",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "2.1.1-0ubuntu3.1",
      "fix": "libcupsfilters-tests 2.1.1-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-libcupsfilters-tests-2.1.1-0ubuntu3.1",
      "released": "2025-11-11T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters1",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.20.2-0ubuntu3.3\u002Besm2",
      "fix": "libcupsfilters1 1.20.2-0ubuntu3.3\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libcupsfilters1-1.20.2-0ubuntu3.3-esm2",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters1",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.27.4-1ubuntu0.4\u002Besm1",
      "fix": "libcupsfilters1 1.27.4-1ubuntu0.4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libcupsfilters1-1.27.4-1ubuntu0.4-esm1",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters1",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.28.15-0ubuntu1.5",
      "fix": "libcupsfilters1 1.28.15-0ubuntu1.5",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libcupsfilters1-1.28.15-0ubuntu1.5",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters2-common",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "2.0.0-0ubuntu7.2",
      "fix": "libcupsfilters2-common 2.0.0-0ubuntu7.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libcupsfilters2-common-2.0.0-0ubuntu7.2",
      "released": "2025-11-11T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters2-common",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2.1.1-0ubuntu2.1",
      "fix": "libcupsfilters2-common 2.1.1-0ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libcupsfilters2-common-2.1.1-0ubuntu2.1",
      "released": "2025-11-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters2-common",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "2.1.1-0ubuntu3.1",
      "fix": "libcupsfilters2-common 2.1.1-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-libcupsfilters2-common-2.1.1-0ubuntu3.1",
      "released": "2025-11-11T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters2t64",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "2.0.0-0ubuntu7.2",
      "fix": "libcupsfilters2t64 2.0.0-0ubuntu7.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libcupsfilters2t64-2.0.0-0ubuntu7.2",
      "released": "2025-11-11T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters2t64",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2.1.1-0ubuntu2.1",
      "fix": "libcupsfilters2t64 2.1.1-0ubuntu2.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libcupsfilters2t64-2.1.1-0ubuntu2.1",
      "released": "2025-11-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcupsfilters2t64",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "2.1.1-0ubuntu3.1",
      "fix": "libcupsfilters2t64 2.1.1-0ubuntu3.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-libcupsfilters2t64-2.1.1-0ubuntu3.1",
      "released": "2025-11-11T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libfontembed1",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.20.2-0ubuntu3.3\u002Besm2",
      "fix": "libfontembed1 1.20.2-0ubuntu3.3\u002Besm2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libfontembed1-1.20.2-0ubuntu3.3-esm2",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libfontembed1",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1.27.4-1ubuntu0.4\u002Besm1",
      "fix": "libfontembed1 1.27.4-1ubuntu0.4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libfontembed1-1.27.4-1ubuntu0.4-esm1",
      "released": "2025-11-20T07:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libfontembed1",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "1.28.15-0ubuntu1.5",
      "fix": "libfontembed1 1.28.15-0ubuntu1.5",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libfontembed1-1.28.15-0ubuntu1.5",
      "released": "2025-11-20T07:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}