CVE Database›CVE-2025-64503

CVE-2025-64503

cups: cups-filters: cups-filters: Out-of-bounds write via crafted PDF MediaBox

Loading…

Severity

Moderate

Red Hat Product Security

4

CVSS 3.1

Review impact separately from score.

Published · November 13, 2025

Updated · July 8, 2026

Description

A flaw was found in cups-filters. This vulnerability allows an out-of-bounds write via a crafted Portable Document Format (PDF) file with a large MediaBox value.

Statement

This vulnerability is rated Moderate for Red Hat Enterprise Linux because a specially crafted PDF file, when processed by the cups-filters pdftoraster tool, can lead to an out-of-bounds write, potentially causing a denial of service. This affects Red Hat Enterprise Linux 7, 8, 9, and 10, as well as Fedora.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-787 · Out-of-bounds Write