CVE-2025-64524

LOW

Openprinting Cups-filters < 2.0.1 - Out-of-Bounds Write

Title source: rule
STIX 2.1

Description

cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.

Scores

CVSS v3 3.3
EPSS 0.0003
EPSS Percentile 7.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-122 CWE-787
Status published
Products (1)
openprinting/cups-filters < 2.0.1
Published Nov 20, 2025
Tracked Since Feb 18, 2026