UBUNTU-CVE-2025-64503

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2025-64503
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-64503.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2025-64503
Upstream
Downstream
Related
Published
2025-11-12T00:00:00Z
Modified
2025-11-25T05:26:13Z
Severity
  • 4.0 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
  • Ubuntu - medium
Summary
[none]
Details

cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In cups-filters prior to 1.28.18, by crafting a PDF file with a large MediaBox value, an attacker can cause CUPS-Filter 1.x’s pdftoraster tool to write beyond the bounds of an array. First, a PDF with a large MediaBox width value causes header.cupsWidth to become large. Next, the calculation of bytesPerLine = (header.cupsBitsPerPixel * header.cupsWidth + 7) / 8 overflows, resulting in a small value. Then, lineBuf is allocated with the small bytesPerLine size. Finally, convertLineChunked calls writePixel8, which attempts to write to lineBuf outside of its buffer size (out of bounds write). In libcupsfilters, the maintainers found the same bytesPerLine multiplication without overflow check, but the provided test case does not cause an overflow there, because the values are different. Commit 50d94ca0f2fa6177613c97c59791bde568631865 contains a patch, which is incorporated into cups-filters version 1.28.18.

References

Affected packages

Ubuntu:22.04:LTS

cups-filters

Package

Name
cups-filters
Purl
pkg:deb/ubuntu/cups-filters@1.28.15-0ubuntu1.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.28.15-0ubuntu1.5

Affected versions

1.*

1.28.10-2
1.28.11-1
1.28.11-2
1.28.12-1
1.28.13-0ubuntu1
1.28.14-1
1.28.15-0ubuntu1
1.28.15-0ubuntu1.2
1.28.15-0ubuntu1.3
1.28.15-0ubuntu1.4

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "1.28.15-0ubuntu1.5",
            "binary_name": "cups-browsed"
        },
        {
            "binary_version": "1.28.15-0ubuntu1.5",
            "binary_name": "cups-filters"
        },
        {
            "binary_version": "1.28.15-0ubuntu1.5",
            "binary_name": "cups-filters-core-drivers"
        },
        {
            "binary_version": "1.28.15-0ubuntu1.5",
            "binary_name": "libcupsfilters-dev"
        },
        {
            "binary_version": "1.28.15-0ubuntu1.5",
            "binary_name": "libcupsfilters1"
        },
        {
            "binary_version": "1.28.15-0ubuntu1.5",
            "binary_name": "libfontembed-dev"
        },
        {
            "binary_version": "1.28.15-0ubuntu1.5",
            "binary_name": "libfontembed1"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:24.04:LTS

libcupsfilters

Package

Name
libcupsfilters
Purl
pkg:deb/ubuntu/libcupsfilters@2.0.0-0ubuntu7.2?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.0.0-0ubuntu7.2

Affected versions

2.*

2.0.0-0ubuntu1
2.0.0-0ubuntu6
2.0.0-0ubuntu7
2.0.0-0ubuntu7.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "2.0.0-0ubuntu7.2",
            "binary_name": "libcupsfilters-dev"
        },
        {
            "binary_version": "2.0.0-0ubuntu7.2",
            "binary_name": "libcupsfilters-tests"
        },
        {
            "binary_version": "2.0.0-0ubuntu7.2",
            "binary_name": "libcupsfilters2-common"
        },
        {
            "binary_version": "2.0.0-0ubuntu7.2",
            "binary_name": "libcupsfilters2t64"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:25.04

libcupsfilters

Package

Name
libcupsfilters
Purl
pkg:deb/ubuntu/libcupsfilters@2.1.1-0ubuntu2.1?arch=source&distro=plucky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.1.1-0ubuntu2.1

Affected versions

2.*

2.1~b1-0ubuntu3
2.1~b1-0ubuntu4
2.1.1-0ubuntu1
2.1.1-0ubuntu2

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "2.1.1-0ubuntu2.1",
            "binary_name": "libcupsfilters-dev"
        },
        {
            "binary_version": "2.1.1-0ubuntu2.1",
            "binary_name": "libcupsfilters-tests"
        },
        {
            "binary_version": "2.1.1-0ubuntu2.1",
            "binary_name": "libcupsfilters2-common"
        },
        {
            "binary_version": "2.1.1-0ubuntu2.1",
            "binary_name": "libcupsfilters2t64"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:25.10

libcupsfilters

Package

Name
libcupsfilters
Purl
pkg:deb/ubuntu/libcupsfilters@2.1.1-0ubuntu3.1?arch=source&distro=questing

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.1.1-0ubuntu3.1

Affected versions

2.*

2.1.1-0ubuntu2
2.1.1-0ubuntu3

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "2.1.1-0ubuntu3.1",
            "binary_name": "libcupsfilters-dev"
        },
        {
            "binary_version": "2.1.1-0ubuntu3.1",
            "binary_name": "libcupsfilters-tests"
        },
        {
            "binary_version": "2.1.1-0ubuntu3.1",
            "binary_name": "libcupsfilters2-common"
        },
        {
            "binary_version": "2.1.1-0ubuntu3.1",
            "binary_name": "libcupsfilters2t64"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:Pro:16.04:LTS

cups-filters

Package

Name
cups-filters
Purl
pkg:deb/ubuntu/cups-filters@1.8.3-2ubuntu3.5+esm3?arch=source&distro=esm-infra/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.8.3-2ubuntu3.5+esm3

Affected versions

1.*

1.0.76-1
1.1.0-1
1.1.0-1build1
1.3.0-1
1.4.0-1
1.5.0-1
1.6.0-1
1.7.0-1
1.8.1-1
1.8.2-1
1.8.2-2
1.8.2-2ubuntu2
1.8.2-2ubuntu3
1.8.3-2ubuntu1
1.8.3-2ubuntu2
1.8.3-2ubuntu3
1.8.3-2ubuntu3.1
1.8.3-2ubuntu3.4
1.8.3-2ubuntu3.5
1.8.3-2ubuntu3.5+esm1
1.8.3-2ubuntu3.5+esm2

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "1.8.3-2ubuntu3.5+esm3",
            "binary_name": "cups-browsed"
        },
        {
            "binary_version": "1.8.3-2ubuntu3.5+esm3",
            "binary_name": "cups-filters"
        },
        {
            "binary_version": "1.8.3-2ubuntu3.5+esm3",
            "binary_name": "cups-filters-core-drivers"
        },
        {
            "binary_version": "1.8.3-2ubuntu3.5+esm3",
            "binary_name": "libcupsfilters-dev"
        },
        {
            "binary_version": "1.8.3-2ubuntu3.5+esm3",
            "binary_name": "libcupsfilters1"
        },
        {
            "binary_version": "1.8.3-2ubuntu3.5+esm3",
            "binary_name": "libfontembed-dev"
        },
        {
            "binary_version": "1.8.3-2ubuntu3.5+esm3",
            "binary_name": "libfontembed1"
        }
    ],
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}

Ubuntu:Pro:18.04:LTS

cups-filters

Package

Name
cups-filters
Purl
pkg:deb/ubuntu/cups-filters@1.20.2-0ubuntu3.3+esm2?arch=source&distro=esm-infra/bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.2-0ubuntu3.3+esm2

Affected versions

1.*

1.17.9-0ubuntu1
1.17.9-1
1.20.0-2
1.20.1-1
1.20.1-1build1
1.20.2-0ubuntu1
1.20.2-0ubuntu2
1.20.2-0ubuntu3
1.20.2-0ubuntu3.1
1.20.2-0ubuntu3.3
1.20.2-0ubuntu3.3+esm1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "1.20.2-0ubuntu3.3+esm2",
            "binary_name": "cups-browsed"
        },
        {
            "binary_version": "1.20.2-0ubuntu3.3+esm2",
            "binary_name": "cups-filters"
        },
        {
            "binary_version": "1.20.2-0ubuntu3.3+esm2",
            "binary_name": "cups-filters-core-drivers"
        },
        {
            "binary_version": "1.20.2-0ubuntu3.3+esm2",
            "binary_name": "libcupsfilters-dev"
        },
        {
            "binary_version": "1.20.2-0ubuntu3.3+esm2",
            "binary_name": "libcupsfilters1"
        },
        {
            "binary_version": "1.20.2-0ubuntu3.3+esm2",
            "binary_name": "libfontembed-dev"
        },
        {
            "binary_version": "1.20.2-0ubuntu3.3+esm2",
            "binary_name": "libfontembed1"
        }
    ],
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}

Ubuntu:Pro:20.04:LTS

cups-filters

Package

Name
cups-filters
Purl
pkg:deb/ubuntu/cups-filters@1.27.4-1ubuntu0.4+esm1?arch=source&distro=esm-infra/focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.27.4-1ubuntu0.4+esm1

Affected versions

1.*

1.25.11-0ubuntu1
1.25.11-1
1.25.12-1
1.25.13-1
1.26.0-1
1.26.1-1
1.26.2-1
1.27.0-1
1.27.0-2
1.27.1-1
1.27.1-2
1.27.1-3
1.27.2-1
1.27.3-1
1.27.4-1
1.27.4-1ubuntu0.2
1.27.4-1ubuntu0.3
1.27.4-1ubuntu0.4

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "1.27.4-1ubuntu0.4+esm1",
            "binary_name": "cups-browsed"
        },
        {
            "binary_version": "1.27.4-1ubuntu0.4+esm1",
            "binary_name": "cups-filters"
        },
        {
            "binary_version": "1.27.4-1ubuntu0.4+esm1",
            "binary_name": "cups-filters-core-drivers"
        },
        {
            "binary_version": "1.27.4-1ubuntu0.4+esm1",
            "binary_name": "libcupsfilters-dev"
        },
        {
            "binary_version": "1.27.4-1ubuntu0.4+esm1",
            "binary_name": "libcupsfilters1"
        },
        {
            "binary_version": "1.27.4-1ubuntu0.4+esm1",
            "binary_name": "libfontembed-dev"
        },
        {
            "binary_version": "1.27.4-1ubuntu0.4+esm1",
            "binary_name": "libfontembed1"
        }
    ],
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}