CVE-2025-64503 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-64503 Interim 1 1 2025-12-23T00:15:37Z current 2025-12-23T00:15:37Z 2025-12-23T00:15:37Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-64503 cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In cups-filters prior to 1.28.18, by crafting a PDF file with a large `MediaBox` value, an attacker can cause CUPS-Filter 1.x's `pdftoraster` tool to write beyond the bounds of an array. First, a PDF with a large `MediaBox` width value causes `header.cupsWidth` to become large. Next, the calculation of `bytesPerLine = (header.cupsBitsPerPixel * header.cupsWidth + 7) / 8` overflows, resulting in a small value. Then, `lineBuf` is allocated with the small `bytesPerLine` size. Finally, `convertLineChunked` calls `writePixel8`, which attempts to write to `lineBuf` outside of its buffer size (out of bounds write). In libcupsfilters, the maintainers found the same `bytesPerLine` multiplication without overflow check, but the provided test case does not cause an overflow there, because the values are different. Commit 50d94ca0f2fa6177613c97c59791bde568631865 contains a patch, which is incorporated into cups-filters version 1.28.18. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2025-November/023312.html E-Mail link for SUSE-SU-2025:4158-1 https://lists.suse.com/pipermail/sle-security-updates/2025-November/023346.html E-Mail link for SUSE-SU-2025:4198-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SLES-LTSS-TERADATA 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP4-TERADATA SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Manager Proxy LTS 4.3 SUSE Manager Retail Branch Server LTS 4.3 SUSE Manager Server LTS 4.3 openSUSE Leap 15.6 cups-filters cups-filters-1.0.58-19.35.1 cups-filters-1.25.0-150200.3.25.1 cups-filters-cups-browsed cups-filters-cups-browsed-1.0.58-19.35.1 cups-filters-devel cups-filters-devel-1.25.0-150200.3.25.1 cups-filters-foomatic-rip cups-filters-foomatic-rip-1.0.58-19.35.1 cups-filters-ghostscript cups-filters-ghostscript-1.0.58-19.35.1 cups-filters-1.25.0-150200.3.25.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 cups-filters-devel-1.25.0-150200.3.25.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 cups-filters-1.25.0-150200.3.25.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 cups-filters-devel-1.25.0-150200.3.25.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 cups-filters-1.0.58-19.35.1 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA cups-filters-cups-browsed-1.0.58-19.35.1 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA cups-filters-foomatic-rip-1.0.58-19.35.1 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA cups-filters-ghostscript-1.0.58-19.35.1 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA cups-filters-1.25.0-150200.3.25.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA cups-filters-devel-1.25.0-150200.3.25.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA cups-filters-1.0.58-19.35.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 cups-filters-cups-browsed-1.0.58-19.35.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 cups-filters-foomatic-rip-1.0.58-19.35.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 cups-filters-ghostscript-1.0.58-19.35.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 cups-filters-1.25.0-150200.3.25.1 as a component of openSUSE Leap 15.6 cups-filters-devel-1.25.0-150200.3.25.1 as a component of openSUSE Leap 15.6 cups-filters as a component of SLES-LTSS-TERADATA 15 SP2 cups-filters as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS cups-filters-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS cups-filters as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS cups-filters-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS cups-filters as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS cups-filters-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS cups-filters as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS cups-filters-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS cups-filters as a component of SUSE Linux Enterprise Server 12 SP2-LTSS cups-filters-cups-browsed as a component of SUSE Linux Enterprise Server 12 SP2-LTSS cups-filters-foomatic-rip as a component of SUSE Linux Enterprise Server 12 SP2-LTSS cups-filters-ghostscript as a component of SUSE Linux Enterprise Server 12 SP2-LTSS cups-filters as a component of SUSE Linux Enterprise Server 12 SP4-LTSS cups-filters-cups-browsed as a component of SUSE Linux Enterprise Server 12 SP4-LTSS cups-filters-foomatic-rip as a component of SUSE Linux Enterprise Server 12 SP4-LTSS cups-filters-ghostscript as a component of SUSE Linux Enterprise Server 12 SP4-LTSS cups-filters as a component of SUSE Linux Enterprise Server 12 SP5-LTSS cups-filters-cups-browsed as a component of SUSE Linux Enterprise Server 12 SP5-LTSS cups-filters-foomatic-rip as a component of SUSE Linux Enterprise Server 12 SP5-LTSS cups-filters-ghostscript as a component of SUSE Linux Enterprise Server 12 SP5-LTSS cups-filters as a component of SUSE Linux Enterprise Server 15 SP1-LTSS cups-filters-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS cups-filters as a component of SUSE Linux Enterprise Server 15 SP2-LTSS cups-filters-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS cups-filters as a component of SUSE Linux Enterprise Server 15 SP3-LTSS cups-filters-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS cups-filters as a component of SUSE Linux Enterprise Server 15 SP4-LTSS cups-filters-devel as a component of SUSE Linux Enterprise Server 15 SP4-LTSS cups-filters as a component of SUSE Linux Enterprise Server 15 SP5-LTSS cups-filters-devel as a component of SUSE Linux Enterprise Server 15 SP5-LTSS cups-filters as a component of SUSE Linux Enterprise Server 15-LTSS cups-filters-devel as a component of SUSE Linux Enterprise Server 15-LTSS cups-filters as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 cups-filters-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 cups-filters as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 cups-filters-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 cups-filters as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 cups-filters-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 cups-filters as a component of SUSE Manager Proxy LTS 4.3 cups-filters-devel as a component of SUSE Manager Proxy LTS 4.3 cups-filters as a component of SUSE Manager Retail Branch Server LTS 4.3 cups-filters-devel as a component of SUSE Manager Retail Branch Server LTS 4.3 cups-filters as a component of SUSE Manager Server LTS 4.3 cups-filters-devel as a component of SUSE Manager Server LTS 4.3 cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In cups-filters prior to 1.28.18, by crafting a PDF file with a large `MediaBox` value, an attacker can cause CUPS-Filter 1.x's `pdftoraster` tool to write beyond the bounds of an array. First, a PDF with a large `MediaBox` width value causes `header.cupsWidth` to become large. Next, the calculation of `bytesPerLine = (header.cupsBitsPerPixel * header.cupsWidth + 7) / 8` overflows, resulting in a small value. Then, `lineBuf` is allocated with the small `bytesPerLine` size. Finally, `convertLineChunked` calls `writePixel8`, which attempts to write to `lineBuf` outside of its buffer size (out of bounds write). In libcupsfilters, the maintainers found the same `bytesPerLine` multiplication without overflow check, but the provided test case does not cause an overflow there, because the values are different. Commit 50d94ca0f2fa6177613c97c59791bde568631865 contains a patch, which is incorporated into cups-filters version 1.28.18. CVE-2025-64503 SUSE Linux Enterprise Module for Basesystem 15 SP6:cups-filters-1.25.0-150200.3.25.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:cups-filters-devel-1.25.0-150200.3.25.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:cups-filters-1.25.0-150200.3.25.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:cups-filters-devel-1.25.0-150200.3.25.1 SUSE Linux Enterprise Server 12 SP3-TERADATA:cups-filters-1.0.58-19.35.1 SUSE Linux Enterprise Server 12 SP3-TERADATA:cups-filters-cups-browsed-1.0.58-19.35.1 SUSE Linux Enterprise Server 12 SP3-TERADATA:cups-filters-foomatic-rip-1.0.58-19.35.1 SUSE Linux Enterprise Server 12 SP3-TERADATA:cups-filters-ghostscript-1.0.58-19.35.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:cups-filters-1.25.0-150200.3.25.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:cups-filters-devel-1.25.0-150200.3.25.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cups-filters-1.0.58-19.35.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cups-filters-cups-browsed-1.0.58-19.35.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cups-filters-foomatic-rip-1.0.58-19.35.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cups-filters-ghostscript-1.0.58-19.35.1 openSUSE Leap 15.6:cups-filters-1.25.0-150200.3.25.1 openSUSE Leap 15.6:cups-filters-devel-1.25.0-150200.3.25.1 low 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L