Priority MEDIUM 58
In Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdevpdfocr.c has an integer overflow that leads to a heap-based buffer overflow in ocr_line8.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00181 · Published 2025-09-22 · Fix deferred CWE-190
Priority MEDIUM 58
Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfmark_coerce_dest in devices/vector/gdevpdfm.c via a large size value.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00204 · Published 2025-09-22 · Fix deferred CWE-121
Priority MEDIUM 58
Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdf_write_cmap in devices/vector/gdevpdtw.c.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00204 · Published 2025-09-22 · Fix deferred CWE-121
Priority LOW 19
gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case.
CVSS 3.1MEDIUM 4.0· Local · No auth · No interaction · EPSS 0.00323 · Published 2025-05-23 · Partial fix · 10.05.1 CWE-212
Priority LOW 20
In Artifex Ghostscript before 10.05.0, decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8 encoding.
CVSS 3.1MEDIUM 4.5· Local · No auth · No interaction · EPSS 0.00184 · Published 2025-04-26 · Partial fix · 10.05.0 CWE-24
Priority MEDIUM 50
An issue was discovered in Artifex Ghostscript before 10.05.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00617 · Published 2025-03-25 · No fix listed CWE-22
Priority MEDIUM 50
An issue was discovered in Artifex Ghostscript before 10.05.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00604 · Published 2025-03-25 · Fix deferred CWE-120
Priority LOW 36
An issue was discovered in Artifex Ghostscript before 10.05.0.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00295 · Published 2025-03-25 · Fix deferred CWE-120
Priority LOW 36
An issue was discovered in Artifex Ghostscript before 10.05.0.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00261 · Published 2025-03-25 · Fix deferred CWE-120
Priority LOW 35
An issue was discovered in Artifex Ghostscript before 10.05.0.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00225 · Published 2025-03-25 · Fix deferred CWE-120
Priority MEDIUM 50
An issue was discovered in Artifex Ghostscript before 10.05.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0084 · Published 2025-03-25 · Partial fix CWE-120
Priority MEDIUM 50
An issue was discovered in Artifex Ghostscript before 10.05.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00604 · Published 2025-03-25 · Fix deferred CWE-120
Priority LOW 36
An issue was discovered in Artifex Ghostscript before 10.05.0.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0031 · Published 2025-03-25 · Fix deferred CWE-120
Priority LOW 36
An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00389 · Published 2024-11-10 · Partial fix CWE-125
Priority LOW 25
An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00294 · Published 2024-11-10 · No fix listed CWE-125
Priority LOW 39
An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00546 · Published 2024-11-10 · Partial fix CWE-22
Priority LOW 36
An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00388 · Published 2024-11-10 · Partial fix CWE-190
Priority LOW 38
An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00316 · Published 2024-11-10 · Partial fix CWE-120
Priority LOW 36
An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00357 · Published 2024-11-10 · Partial fix CWE-824
Priority MEDIUM 43
An issue was discovered in Artifex Ghostscript before 10.03.1.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01425 · Published 2024-07-03 · Partial fix CWE-94
Priority LOW 29
An issue was discovered in Artifex Ghostscript before 10.03.1.
CVSS 3.1MEDIUM 6.3· Adjacent network · No auth · No interaction · EPSS 0.00515 · Published 2024-07-03 · Partial fix CWE-22
Priority LOW 24
An issue was discovered in Artifex Ghostscript before 10.03.1.
CVSS 3.1MEDIUM 5.3· Local · No auth · User interaction · EPSS 0.00454 · Published 2024-07-03 · Partial fix CWE-22
Priority HIGH 68
Artifex Ghostscript before 10.03.1, when Tesseract is used for OCR, has a directory traversal issue that allows arbitrary file reading (and writing of error messages to arbitrary files) via OCRLanguage.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01137 · Published 2024-07-03 · No fix listed CWE-489
Priority MEDIUM 61
Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.
CVSS 3.1MEDIUM 6.3· Local · No auth · User interaction · EPSS 0.27974 · Published 2024-07-03 · Partial fix CWE-693
Priority MEDIUM 41
Artifex Ghostscript before 10.03.0 has a heap-based overflow when PDFPassword (e.g., for runpdf) has a \000 byte in the middle.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01446 · Published 2024-07-03 · Will not fix CWE-787
Load more
THREATIST.IORead the docs