CVE-2025-64524

cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.

• CWE-122
• CWE-787

• https://github.com/OpenPrinting/cups-filters/commit/956283c74a34ae924266a2a63f8e5f529a1abd06Patch
• https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-rq44-2q5p-x3hvExploit, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2025/11/20/1Mailing List, Patch
• https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-rq44-2q5p-x3hvExploit, Vendor Advisory

Published

Nov 20, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-64519TorrentPier is an open source BitTorrent Public/Private trac…8.8
• CVE-2025-6452A vulnerability was found in CodeAstro Patient Record Manage…4.8
• CVE-2025-64520GLPI is a free asset and IT management software package. Sta…4.3
• CVE-2025-64521authentik is an open-source Identity Provider. Prior to vers…4.8
• CVE-2025-64522Soft Serve is a self-hostable Git server for the command lin…7.6
• CVE-2025-64523File Browser provides a file managing interface within a spe…8.8
• CVE-2025-64525Astro is a web framework. In Astro versions 2.16.0 up to but…6.5
• CVE-2025-64526Strapi is an open source headless content management system.…5.3
• CVE-2025-64527Envoy is a high-performance edge/middle/service proxy. In 1.…6.5
• CVE-2025-64528Discourse is an open source discussion platform. Prior to ve…5.3
• CVE-2025-64529SpiceDB is an open source database system for creating and m…6.5
• CVE-2025-6453A vulnerability classified as critical has been found in diy…4.3