Out-of-bounds Read The advisory has been revoked - it doesn't affect any version of package OpenPrinting/cups-filters  (opens in a new tab)


Threat Intelligence

EPSS
0.48% (40th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about Out-of-bounds Read vulnerabilities in an interactive lesson.

Start learning
  • Snyk IDSNYK-UNMANAGED-OPENPRINTINGCUPSFILTERS-13923714
  • published13 Nov 2025
  • disclosed12 Nov 2025
  • creditUnknown

Introduced: 12 Nov 2025

CVE-2025-57812  (opens in a new tab)
CWE-125  (opens in a new tab)

Amendment

This was deemed not a vulnerability.

Overview

Affected versions of this package are vulnerable to Out-of-bounds Read via the cfImageLut function when processing TIFF image files. An attacker can cause out-of-bounds memory access by submitting a crafted TIFF file as a print job and manipulating print job options to control the bytes-per-pixel value, leading to potential information disclosure or modification of memory.

Note: This is only exploitable if the attacker can submit print jobs and select a printer configuration that invokes the imagetoraster filter or its C-function equivalent.