Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ghostscript-cupsUpgrade libgs-develUpgrade ghostscript-debuginfoUpgrade ghostscript-gtkUpgrade libgsUpgrade ghostscript-docUpgrade ghostscript | Aug 14, 2024 | Jul 3, 2024 |
| Amazon_linux_2023 | — | Upgrade ghostscript-debugsourceUpgrade ghostscript-debuginfoUpgrade ghostscript-tools-printingUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-tools-fontsUpgrade ghostscript-gtkUpgrade ghostscript-docUpgrade ghostscript-gtk-debuginfoUpgrade libgsUpgrade ghostscriptUpgrade libgs-debuginfoUpgrade ghostscript-x11Upgrade ghostscript-tools-dvipdfUpgrade libgs-devel | Feb 17, 2025 | Jul 3, 2024 |
| Debian | — | Upgrade ghostscript | Sep 2, 2024 | Jul 3, 2024 |
| Ghostscript | — | Upgrade to Ghostscript version 10.03.0 | Jul 8, 2024 | Jul 3, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscript-helpUpgrade ghostscript | Nov 11, 2024 | Jul 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ghostscriptUpgrade ghostscript-help | Nov 11, 2024 | Jul 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2024 |
| Suse | — | Upgrade ghostscriptUpgrade ghostscript-develUpgrade ghostscript-x11 | Jul 18, 2024 | Jul 3, 2024 |
| Ubuntu | — | Upgrade ghostscript-x (Ubuntu Pro)Upgrade libgs9Upgrade ghostscriptUpgrade libgs9 (Ubuntu Pro)Upgrade libgs9-common (Ubuntu Pro)Upgrade ghostscript (Ubuntu Pro)Upgrade libgs-dev (Ubuntu Pro)Upgrade libgs10 | Jul 16, 2024 | Jul 3, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub