Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ghostscript-cupsUpgrade libgs-develUpgrade ghostscript-debuginfoUpgrade ghostscript-docUpgrade ghostscriptUpgrade libgsUpgrade ghostscript-gtk | Aug 14, 2024 | Jul 3, 2024 |
| Amazon_linux_2023 | — | Upgrade ghostscript-x11-debuginfoUpgrade ghostscript-tools-fontsUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-docUpgrade ghostscript-debuginfoUpgrade ghostscript-gtkUpgrade ghostscript-debugsourceUpgrade ghostscript-tools-printingUpgrade ghostscriptUpgrade libgs-debuginfoUpgrade libgsUpgrade libgs-develUpgrade ghostscript-x11Upgrade ghostscript-tools-dvipdf | Feb 17, 2025 | Jul 3, 2024 |
| Debian | — | Upgrade ghostscript | Sep 2, 2024 | Jul 3, 2024 |
| Ghostscript | — | Upgrade to Ghostscript version 10.03.0 | Jul 8, 2024 | Jul 3, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscriptUpgrade ghostscript-help | Nov 11, 2024 | Jul 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ghostscript-helpUpgrade ghostscript | Nov 11, 2024 | Jul 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2024 |
| Suse | — | Upgrade ghostscriptUpgrade ghostscript-develUpgrade ghostscript-x11 | Jul 18, 2024 | Jul 3, 2024 |
| Ubuntu | — | Upgrade libgs10Upgrade libgs-dev (Ubuntu Pro)Upgrade ghostscript (Ubuntu Pro)Upgrade libgs9-common (Ubuntu Pro)Upgrade ghostscriptUpgrade ghostscript-x (Ubuntu Pro)Upgrade libgs9Upgrade libgs9 (Ubuntu Pro) | Jul 16, 2024 | Jul 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub