cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciously crafted input data. This issue can be exploited to trigger memory corruption, potentially leading to arbitrary code execution. This issue has been patched via commit 956283c.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade cups-filtersUpgrade cups-filters-develUpgrade cups-filters-libsUpgrade cups-filters-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade cups-filters-debugsourceUpgrade cups-filters-libsUpgrade cups-filtersUpgrade cups-filters-debuginfoUpgrade cups-filters-develUpgrade cups-filters-libs-debuginfo | Dec 9, 2025 | Nov 20, 2025 |
| Debian | — | Upgrade cups-filters | Nov 27, 2025 | Nov 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Nov 20, 2025 |
| Ubuntu | — | Upgrade libcupsfilters1 (Ubuntu Pro)Upgrade libcupsfilters1Upgrade cups-filters (Ubuntu Pro)Upgrade cups-filters | Nov 25, 2025 | Nov 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub