Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ghostscript-gtkUpgrade ghostscriptUpgrade ghostscript-docUpgrade libgsUpgrade ghostscript-debuginfoUpgrade ghostscript-cupsUpgrade libgs-devel | Aug 14, 2024 | Jul 3, 2024 |
| Amazon_linux_2023 | — | Upgrade ghostscript-debugsourceUpgrade ghostscript-debuginfoUpgrade ghostscript-gtkUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-docUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-tools-fontsUpgrade ghostscript-tools-printingUpgrade ghostscriptUpgrade libgsUpgrade ghostscript-x11Upgrade libgs-debuginfoUpgrade ghostscript-tools-dvipdfUpgrade libgs-devel | Feb 17, 2025 | Jul 3, 2024 |
| Debian | — | Upgrade ghostscript | Sep 2, 2024 | Jul 3, 2024 |
| Ghostscript | — | Upgrade to Ghostscript version 10.03.0 | Jul 8, 2024 | Jul 3, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscriptUpgrade ghostscript-help | Nov 11, 2024 | Jul 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ghostscriptUpgrade ghostscript-help | Nov 11, 2024 | Jul 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2024 |
| Suse | — | Upgrade ghostscript-x11Upgrade ghostscript-develUpgrade ghostscript | Jul 18, 2024 | Jul 3, 2024 |
| Ubuntu | — | Upgrade libgs9 (Ubuntu Pro)Upgrade ghostscriptUpgrade ghostscript-x (Ubuntu Pro)Upgrade ghostscript (Ubuntu Pro)Upgrade libgs9Upgrade libgs9-common (Ubuntu Pro)Upgrade libgs-dev (Ubuntu Pro)Upgrade libgs10 | Jul 16, 2024 | Jul 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub