Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampled_data_sample (called from sampled_data_continue and interp).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-ghostscript | Mar 21, 2024 | Dec 31, 2021 | |
| Debian | debian-upgrade-ghostscript | Jan 10, 2022 | Jan 1, 2022 | |
| Ghostscript | ghostscript-upgrade-9_54 | Feb 24, 2022 | Dec 31, 2021 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-ghostscripthuawei-euleros-2_0_sp10-upgrade-ghostscript-help | Apr 20, 2022 | Jan 1, 2022 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-ghostscripthuawei-euleros-2_0_sp3-upgrade-ghostscript-cups | May 25, 2022 | Jan 1, 2022 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-ghostscripthuawei-euleros-2_0_sp5-upgrade-ghostscript-cups | Apr 26, 2022 | Jan 1, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-ghostscripthuawei-euleros-2_0_sp9-upgrade-ghostscript-help | Apr 19, 2022 | Jan 1, 2022 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | Jan 1, 2022 | |
| Suse | — | suse-upgrade-ghostscriptsuse-upgrade-ghostscript-develsuse-upgrade-ghostscript-x11 | Jan 15, 2022 | Jan 1, 2022 |
| Ubuntu | ubuntu-pro-upgrade-ghostscriptubuntu-pro-upgrade-libgs9ubuntu-upgrade-ghostscriptubuntu-upgrade-libgs9 | Jan 13, 2022 | Jan 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub