Read the docs
TI-2025-06800 Aliases CVE-2025-7462GHSA-hf2c-wp2p-xqr9

Artifex GhostPDL New Output File Open Error gdevpdf.c pdf_ferror null pointer dereference

Priority LOW 24CWE-404Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Low
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-404.

Summary

A vulnerability was found in Artifex GhostPDL up to 3989415a5b8e99b9d1b87cc9902bde9b7cdea145. It has been classified as problematic. This affects the function pdf_ferror of the file devices/vector/gdevpdf.c of the component New Output File Open Error Handler. The manipulation leads to null pointer dereference. It is possible to initiate the attack remotely. The identifier of the patch is 619a106ba4c4abed95110f84d5efcd7aee38c7cb. It is recommended to apply a patch to fix this issue.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00464 40th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ArtifexGhostPDL3989415a5b8e99b9d1b87cc9902bde9b7cdea145—No fix listedCNA
  • GhostPDL VendorArtifex Affected 3989415a5b8e99b9d1b87cc9902bde9b7cdea145 Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-7462
  2. 2026-10-03 Alias added: GHSA-hf2c-wp2p-xqr9

References

Patch 1

Other 1

  • TI-2017-05861 Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution… KEVCVSS 3.1HIGH 7.8
  • TI-2021-02712 Improper input validation in ghostscript CVSS 3.1CRITICAL 9.9
  • TI-2023-13382 In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential… CVSS 3.1CRITICAL 9.8
  • TI-2021-13164 Memory corruption in mujs CVSS 3.1CRITICAL 9.8
  • TI-2018-11841 An issue was discovered in Artifex Ghostscript before 9.24. CVSS 3.0HIGH 7.8
  • TI-2024-16051 freeglut through 3.4.0 was discovered to contain a memory leak via the menuEntry variable… CVSS 3.1HIGH 7.5
See all 265 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences