cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In cups-filters prior to 1.28.18, by crafting a PDF file with a large `MediaBox` value, an attacker can cause CUPS-Filter 1.x’s `pdftoraster` tool to write beyond the bounds of an array. First, a PDF with a large `MediaBox` width value causes `header.cupsWidth` to become large. Next, the calculation of `bytesPerLine = (header.cupsBitsPerPixel * header.cupsWidth + 7) / 8` overflows, resulting in a small value. Then, `lineBuf` is allocated with the small `bytesPerLine` size. Finally, `convertLineChunked` calls `writePixel8`, which attempts to write to `lineBuf` outside of its buffer size (out of bounds write). In libcupsfilters, the maintainers found the same `bytesPerLine` multiplication without overflow check, but the provided test case does not cause an overflow there, because the values are different. Commit 50d94ca0f2fa6177613c97c59791bde568631865 contains a patch, which is incorporated into cups-filters version 1.28.18.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4158-1 advisory.

    - CVE-2025-64503: Fixed out-of-bounds write in pdftoraster tool (bsc#1253374)
    - CVE-2025-57812: Fixed multiple TIFF-related issues in libcupsfilters (bsc#1253373)
    - CVE-2025-64524: Fixed out-of-bounds write de to use of unvalidated length parameter in the rastertopclx     filter (bsc#1253364)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7878-1 advisory.

    It was discovered that cups-filters incorrectly handled certain malformed TIFF image files. A remote     attacker could use this issue to cause cups-filters to crash, resulting in a denial of service, or     possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04     LTS, and Ubuntu 22.04 LTS. (CVE-2025-57812)

    It was discovered that cups-filters incorrectly handled certain malformed PDF document files. A remote     attacker could use this issue to cause cups-filters to crash, resulting in a denial of service, or     possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04     LTS, and Ubuntu 22.04 LTS. (CVE-2025-64503)

    It was discovered that cups-filters incorrectly handled certain malformed CUPS Raster files. A remote     attacker could use this issue to cause cups-filters to crash, resulting in a denial of service, or     possibly execute arbitrary code. (CVE-2025-64524)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7877-1 advisory.

    It was discovered that libcupsfilters incorrectly handled certain malformed TIFF image files. A remote     attacker could use this issue to cause libcupsfilters to crash, resulting in a denial of service, or     possibly execute arbitrary code. (CVE-2025-57812)

    It was discovered that libcupsfilters incorrectly handled certain malformed PDF document files. A remote     attacker could use this issue to cause libcupsfilters to crash, resulting in a denial of service, or     possibly execute arbitrary code. (CVE-2025-64503)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - cups-filters contains backends, filters, and other software required to get the cups printing service     working on operating systems other than macos. In cups-filters prior to 1.28.18, by crafting a PDF file     with a large `MediaBox` value, an attacker can cause CUPS-Filter 1.x's `pdftoraster` tool to write beyond     the bounds of an array. First, a PDF with a large `MediaBox` width value causes `header.cupsWidth` to     become large. Next, the calculation of `bytesPerLine = (header.cupsBitsPerPixel * header.cupsWidth + 7) /     8` overflows, resulting in a small value. Then, `lineBuf` is allocated with the small `bytesPerLine` size.
    Finally, `convertLineChunked` calls `writePixel8`, which attempts to write to `lineBuf` outside of its     buffer size (out of bounds write). In libcupsfilters, the maintainers found the same `bytesPerLine`     multiplication without overflow check, but the provided test case does not cause an overflow there,     because the values are different. Commit 50d94ca0f2fa6177613c97c59791bde568631865 contains a patch, which     is incorporated into cups-filters version 1.28.18. (CVE-2025-64503)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
276527	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : cups-filters (SUSE-SU-2025:4158-1)	Nessus	SuSE Local Security Checks	low
276523	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 : cups-filters vulnerabilities (USN-7878-1)	Nessus	Ubuntu Local Security Checks	low
276522	Ubuntu 24.04 LTS / 25.04 / 25.10 : libcupsfilters vulnerabilities (USN-7877-1)	Nessus	Ubuntu Local Security Checks	low
275284	Linux Distros Unpatched Vulnerability : CVE-2025-64503	Nessus	Misc.	medium

Detections

Analytics

CVE-2025-64503

medium

Tenable Plugins

low

low

low

medium