Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libgs-develUpgrade ghostscript-cupsUpgrade ghostscript-debuginfoUpgrade ghostscriptUpgrade ghostscript-docUpgrade libgsUpgrade ghostscript-gtk | Aug 14, 2024 | Jul 3, 2024 |
| Amazon_linux_2023 | — | Upgrade ghostscript-tools-dvipdfUpgrade libgsUpgrade ghostscript-x11Upgrade ghostscriptUpgrade libgs-debuginfoUpgrade libgs-develUpgrade ghostscript-debugsourceUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-debuginfoUpgrade ghostscript-docUpgrade ghostscript-gtkUpgrade ghostscript-tools-printingUpgrade ghostscript-tools-fonts | Feb 17, 2025 | Jul 3, 2024 |
| Debian | — | Upgrade ghostscript | Sep 2, 2024 | Jul 3, 2024 |
| Ghostscript | — | Upgrade to Ghostscript version 10.03.0 | Jul 8, 2024 | Jul 3, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscriptUpgrade ghostscript-help | Nov 11, 2024 | Jul 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ghostscriptUpgrade ghostscript-help | Nov 11, 2024 | Jul 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2024 |
| Suse | — | Upgrade ghostscript-x11Upgrade ghostscript-develUpgrade ghostscript | Jul 18, 2024 | Jul 3, 2024 |
| Ubuntu | — | Upgrade libgs10Upgrade libgs-dev (Ubuntu Pro)Upgrade ghostscript (Ubuntu Pro)Upgrade libgs9 (Ubuntu Pro)Upgrade ghostscript-x (Ubuntu Pro)Upgrade libgs9-common (Ubuntu Pro)Upgrade ghostscriptUpgrade libgs9 | Jul 16, 2024 | Jul 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub