Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ghostscript-gtkUpgrade libgsUpgrade ghostscript-docUpgrade ghostscriptUpgrade libgs-develUpgrade ghostscript-debuginfoUpgrade ghostscript-cups | Aug 14, 2024 | Jul 3, 2024 |
| Amazon_linux_2023 | — | Upgrade ghostscript-x11-debuginfoUpgrade ghostscript-gtkUpgrade ghostscript-tools-fontsUpgrade ghostscript-debuginfoUpgrade ghostscript-tools-printingUpgrade ghostscript-debugsourceUpgrade ghostscript-docUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-tools-dvipdfUpgrade libgs-develUpgrade ghostscript-x11Upgrade libgs-debuginfoUpgrade libgsUpgrade ghostscript | Feb 17, 2025 | Jul 3, 2024 |
| Debian | — | Upgrade ghostscript | Sep 2, 2024 | Jul 3, 2024 |
| Ghostscript | — | Upgrade to Ghostscript version 10.03.0 | Jul 8, 2024 | Jul 3, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscript-helpUpgrade ghostscript | Nov 11, 2024 | Jul 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ghostscript-helpUpgrade ghostscript | Nov 11, 2024 | Jul 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2024 |
| Suse | — | Upgrade ghostscript-develUpgrade ghostscriptUpgrade ghostscript-x11 | Jul 18, 2024 | Jul 3, 2024 |
| Ubuntu | — | Upgrade libgs-dev (Ubuntu Pro)Upgrade libgs10Upgrade libgs9Upgrade ghostscriptUpgrade libgs9-common (Ubuntu Pro)Upgrade ghostscript (Ubuntu Pro)Upgrade ghostscript-x (Ubuntu Pro)Upgrade libgs9 (Ubuntu Pro) | Jul 16, 2024 | Jul 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub