CVE-2025-64503
cups: cups-filters: cups-filters: Out-of-bounds write via crafted PDF MediaBox
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · November 13, 2025
Updated · July 8, 2026
Description
A flaw was found in cups-filters. This vulnerability allows an out-of-bounds write via a crafted Portable Document Format (PDF) file with a large MediaBox value.
Statement
This vulnerability is rated Moderate for Red Hat Enterprise Linux because a specially crafted PDF file, when processed by the cups-filters pdftoraster tool, can lead to an out-of-bounds write, potentially causing a denial of service. This affects Red Hat Enterprise Linux 7, 8, 9, and 10, as well as Fedora.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-787 · Out-of-bounds Write