Threats Tagged 'cve-2025-64503'
View all threats tagged with 'cve-2025-64503'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-64503'
Click on any threat for detailed analysis and mitigation recommendations
0 This update includes the following RPMs: cups: * cups-2.4.17-1.hum1 (aarch64, x86_64) * cups-client-2.4.17-1.hum1 (aarch64, x86_64) * cups-devel-2.4.17-1.hum1 (aarch64, x86_64) * cups-filesystem-2.4.17-1.hum1 (noarch) * cups-ipptool-2.4.17-1.hum1 (aarch64, x86_64) * cups-libs-2.4.17-1.hum1 (aarch64, x86_64) * cups-lpd-2.4.17-1.hum1 (aarch64, x86_64) * cups-printerapp-2.4.17-1.hum1 (aarch64, x86_64) * cups-2.4.17-1.hum1.src (src) Join the discussion | GCVE Database | 04/17/2026, 17:04:56 UTC Added: 06/27/2026, 22:08:14 UTC |
cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In cups-filters prior to 1.28.18, by crafting a PDF file with a large `MediaBox` value, an attacker can cause CUPS-Filter 1.x’s `pdftoraster` tool to write beyond the bounds of an array. First, a PDF with a large `MediaBox` width value causes `header.cupsWidth` to become large. Next, the calculation of `bytesPerLine = (header.cupsBitsPerPixel * header.cupsWidth + 7) / 8` overflows, resulting in a small value. Then, `lineBuf` is allocated with the small `bytesPerLine` size. Finally, `convertLineChunked` calls `writePixel8`, which attempts to write to `lineBuf` outside of its buffer size (out of bounds write). In libcupsfilters, the maintainers found the same `bytesPerLine` multiplication without overflow check, but the provided test case does not cause an overflow there, because the values are different. Commit 50d94ca0f2fa6177613c97c59791bde568631865 contains a patch, which is incorporated into cups-filters version 1.28.18. Join the discussion | CVE Database V5 | 11/12/2025, 22:04:03 UTC Added: 11/12/2025, 22:26:51 UTC |
Showing 1 to 2 of 2 results