A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it relies on an init_device_procs defined for the device that uses it as a prototype that depends upon the number of bits per pixel. For bpp > 64, mem_x_device is used and does not have an init_device_procs defined. This flaw allows an attacker to parse a large number of bits (more than 64 bits per pixel), which triggers a NULL pointer dereference flaw, causing an application to crash.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ghostscript | Mar 21, 2024 | Jun 16, 2022 |
| Amazon_linux_2023 | — | Upgrade ghostscript-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-gtkUpgrade ghostscript-tools-fontsUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-tools-printingUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-docUpgrade libgs-debuginfoUpgrade ghostscript-x11Upgrade ghostscriptUpgrade ghostscript-tools-dvipdfUpgrade libgs-develUpgrade libgs | Feb 17, 2025 | Feb 14, 2022 |
| Debian | — | Upgrade ghostscript | Jul 30, 2024 | Jun 16, 2022 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Nov 23, 2022 | Jun 16, 2022 |
| Ghostscript | — | Upgrade to Ghostscript version 9.55 | Jul 5, 2022 | Jun 16, 2022 |
| Ubuntu | — | Upgrade ghostscript | Sep 28, 2022 | Jun 16, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub