Skip to main content

Cups Filters

17 CVEs product

Monthly

CVE-2025-64524 Nov 20, 18:15 LOW POC PATCH Monitor

cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. Public exploit code available.

RCE Buffer Overflow Heap Overflow Apple macOS +2
NVD GitHub
CVSS 3.1
3.3
EPSS
0.0%
CVE-2025-64503 Nov 12, 22:15 MEDIUM POC PATCH Monitor

cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. Rated medium severity (CVSS 4.0), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Memory Corruption Apple macOS Red Hat +4
NVD GitHub
CVSS 3.1
4.0
EPSS
0.0%
CVE-2025-57812 Nov 12, 19:15 LOW POC PATCH Monitor

CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used for the data format. Rated low severity (CVSS 3.7). Public exploit code available.

Buffer Overflow Information Disclosure Cups Filters Libcupsfilters Openprinting
NVD GitHub
CVSS 3.1
3.7
EPSS
0.1%
CVE-2023-24805 May 17, 18:15 HIGH POC PATCH This Week

cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

RCE Command Injection Apple Debian Debian Linux +4
NVD GitHub
CVSS 3.1
8.8
EPSS
3.7%
CVE-2015-8560 Apr 14, 14:59 HIGH Act Now

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 10.8% and no vendor patch available.

Information Disclosure Debian Canonical Debian Linux Ubuntu Linux +3
NVD
CVSS 3.0
7.3
EPSS
10.8%
CVE-2015-8327 Dec 17, 19:59 HIGH Act Now

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via `. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 20.7% and no vendor patch available.

Information Disclosure Debian Red Hat Canonical Debian Linux +9
NVD
CVSS 2.0
7.5
EPSS
20.7%
CVE-2015-3279 Jul 14, 16:59 HIGH Act Now

Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 34.5% and no vendor patch available.

RCE Buffer Overflow Denial Of Service Debian Canonical +4
NVD
CVSS 2.0
7.5
EPSS
34.5%
CVE-2015-3258 Jul 14, 16:59 HIGH Act Now

Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups-filters before 1.0.70 allows remote attackers to cause a denial of service (crash) or possibly. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 37.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service Debian Canonical +4
NVD
CVSS 2.0
7.5
EPSS
37.1%
CVE-2015-2265 Mar 24, 17:59 HIGH POC PATCH This Week

The remove_bad_chars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote IPP printers to execute arbitrary commands via consecutive shell metacharacters in the (1) model or. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Command Injection Canonical Ubuntu Linux Cups Filters Linuxfoundation
NVD
CVSS 2.0
7.5
EPSS
5.8%
CVE-2014-4338 Jun 22, 21:55 MEDIUM This Month

cups-browsed in cups-filters before 1.0.53 allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging a malformed cups-browsed.conf BrowseAllow. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Cups Filters Linuxfoundation
NVD
CVSS 2.0
4.0
EPSS
0.4%
CVE-2014-4337 Jun 22, 21:55 MEDIUM PATCH This Month

The process_browse_data function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote attackers to cause a denial of service (out-of-bounds read and application crash). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

Buffer Overflow Denial Of Service Cups Filters Linuxfoundation
NVD
CVSS 2.0
4.3
EPSS
2.1%
CVE-2014-4336 Jun 22, 21:55 MEDIUM PATCH This Month

The generate_local_queue function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the host. Rated medium severity (CVSS 5.8), this vulnerability is low attack complexity. This Command Injection vulnerability could allow attackers to inject arbitrary commands into system command execution.

Command Injection Cups Filters Linuxfoundation
NVD
CVSS 2.0
5.8
EPSS
0.5%
CVE-2014-2707 Apr 17, 14:55 HIGH This Week

cups-browsed in cups-filters 1.0.41 before 1.0.51 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the (1) model or (2) PDL, related to "System V interface scripts. Rated high severity (CVSS 8.3), this vulnerability is low attack complexity. No vendor patch available.

Command Injection Cups Filters Linuxfoundation
NVD VulDB
CVSS 2.0
8.3
EPSS
1.3%
CVE-2013-6476 Mar 14, 15:55 MEDIUM PATCH This Month

The OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows local users to gain privileges via a Trojan horse driver in the same. Rated medium severity (CVSS 4.4).

Privilege Escalation Debian Canonical Debian Linux Fedora +4
NVD VulDB
CVSS 2.0
4.4
EPSS
0.3%
CVE-2013-6475 Mar 14, 15:55 MEDIUM PATCH This Month

Multiple integer overflows in (1) OPVPOutputDev.cxx and (2) oprs/OPVPSplash.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allow remote attackers to execute arbitrary code via a. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Epss exploitation probability 20.7%.

RCE Buffer Overflow Debian Canonical Debian Linux +5
NVD VulDB
CVSS 2.0
6.8
EPSS
20.7%
CVE-2013-6474 Mar 14, 15:55 MEDIUM PATCH This Month

Heap-based buffer overflow in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows remote attackers to execute arbitrary code via a crafted PDF file. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Epss exploitation probability 20.8%.

RCE Buffer Overflow Debian Canonical Debian Linux +5
NVD VulDB
CVSS 2.0
6.8
EPSS
20.8%
CVE-2013-6473 Mar 14, 15:55 MEDIUM PATCH This Month

Multiple heap-based buffer overflows in the urftopdf filter in cups-filters 1.0.25 before 1.0.47 allow remote attackers to execute arbitrary code via a large (1) page or (2) line in a URF file. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Epss exploitation probability 13.7%.

RCE Buffer Overflow Canonical Ubuntu Linux Cups Filters +1
NVD VulDB
CVSS 2.0
6.8
EPSS
13.7%
EPSS 0% CVSS 3.3
LOW POC PATCH Monitor

cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. Public exploit code available.

RCE Buffer Overflow Heap Overflow +4
NVD GitHub
EPSS 0% CVSS 4.0
MEDIUM POC PATCH Monitor

cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. Rated medium severity (CVSS 4.0), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Memory Corruption Apple +6
NVD GitHub
EPSS 0% CVSS 3.7
LOW POC PATCH Monitor

CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package as library functions to be used for the data format. Rated low severity (CVSS 3.7). Public exploit code available.

Buffer Overflow Information Disclosure Cups Filters +2
NVD GitHub
EPSS 4% CVSS 8.8
HIGH POC PATCH This Week

cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

RCE Command Injection Apple +6
NVD GitHub
EPSS 11% CVSS 7.3
HIGH Act Now

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 10.8% and no vendor patch available.

Information Disclosure Debian Canonical +5
NVD
EPSS 21% CVSS 7.5
HIGH Act Now

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via `. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 20.7% and no vendor patch available.

Information Disclosure Debian Red Hat +11
NVD
EPSS 35% CVSS 7.5
HIGH Act Now

Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 34.5% and no vendor patch available.

RCE Buffer Overflow Denial Of Service +6
NVD
EPSS 37% CVSS 7.5
HIGH Act Now

Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups-filters before 1.0.70 allows remote attackers to cause a denial of service (crash) or possibly. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 37.1% and no vendor patch available.

RCE Buffer Overflow Denial Of Service +6
NVD
EPSS 6% CVSS 7.5
HIGH POC PATCH This Week

The remove_bad_chars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote IPP printers to execute arbitrary commands via consecutive shell metacharacters in the (1) model or. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Command Injection Canonical Ubuntu Linux +2
NVD
EPSS 0% CVSS 4.0
MEDIUM This Month

cups-browsed in cups-filters before 1.0.53 allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging a malformed cups-browsed.conf BrowseAllow. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Cups Filters Linuxfoundation
NVD
EPSS 2% CVSS 4.3
MEDIUM PATCH This Month

The process_browse_data function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote attackers to cause a denial of service (out-of-bounds read and application crash). Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

Buffer Overflow Denial Of Service Cups Filters +1
NVD
EPSS 1% CVSS 5.8
MEDIUM PATCH This Month

The generate_local_queue function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the host. Rated medium severity (CVSS 5.8), this vulnerability is low attack complexity. This Command Injection vulnerability could allow attackers to inject arbitrary commands into system command execution.

Command Injection Cups Filters Linuxfoundation
NVD
EPSS 1% CVSS 8.3
HIGH This Week

cups-browsed in cups-filters 1.0.41 before 1.0.51 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the (1) model or (2) PDL, related to "System V interface scripts. Rated high severity (CVSS 8.3), this vulnerability is low attack complexity. No vendor patch available.

Command Injection Cups Filters Linuxfoundation
NVD VulDB
EPSS 0% CVSS 4.4
MEDIUM PATCH This Month

The OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows local users to gain privileges via a Trojan horse driver in the same. Rated medium severity (CVSS 4.4).

Privilege Escalation Debian Canonical +6
NVD VulDB
EPSS 21% CVSS 6.8
MEDIUM PATCH This Month

Multiple integer overflows in (1) OPVPOutputDev.cxx and (2) oprs/OPVPSplash.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allow remote attackers to execute arbitrary code via a. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Epss exploitation probability 20.7%.

RCE Buffer Overflow Debian +7
NVD VulDB
EPSS 21% CVSS 6.8
MEDIUM PATCH This Month

Heap-based buffer overflow in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows remote attackers to execute arbitrary code via a crafted PDF file. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Epss exploitation probability 20.8%.

RCE Buffer Overflow Debian +7
NVD VulDB
EPSS 14% CVSS 6.8
MEDIUM PATCH This Month

Multiple heap-based buffer overflows in the urftopdf filter in cups-filters 1.0.25 before 1.0.47 allow remote attackers to execute arbitrary code via a large (1) page or (2) line in a URF file. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Epss exploitation probability 13.7%.

RCE Buffer Overflow Canonical +3
NVD VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy