An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (related to W array values).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ghostscript-docUpgrade ghostscriptUpgrade ghostscript-tools-printingUpgrade libgsUpgrade libgs-develUpgrade ghostscript-x11Upgrade ghostscript-tools-dvipdfUpgrade ghostscript-tools-fonts | May 6, 2025 | Nov 10, 2024 |
| Amazon_linux_2023 | — | Upgrade ghostscript-tools-printingUpgrade ghostscript-tools-fontsUpgrade ghostscript-gtkUpgrade ghostscript-debuginfoUpgrade ghostscript-x11-debuginfoUpgrade libgs-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscriptUpgrade libgs-develUpgrade ghostscript-docUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-x11Upgrade ghostscript-tools-dvipdfUpgrade libgs | Feb 17, 2025 | Nov 10, 2024 |
| Debian | — | Upgrade ghostscript | Nov 18, 2024 | Nov 10, 2024 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Jan 24, 2025 | Nov 10, 2024 |
| Ghostscript | — | Upgrade to Ghostscript version 10.04.0 | Nov 19, 2024 | Nov 10, 2024 |
| Oracle_linux | — | Upgrade libgsUpgrade libgs-develUpgrade ghostscript-tools-dvipdfUpgrade ghostscriptUpgrade ghostscript-x11Upgrade ghostscript-tools-printingUpgrade ghostscript-docUpgrade ghostscript-tools-fonts | May 1, 2025 | Nov 10, 2024 |
| Redhat_linux | — | Upgrade libgs-debuginfoUpgrade ghostscriptUpgrade ghostscript-tools-dvipdfUpgrade libgsUpgrade ghostscript-x11Upgrade ghostscript-docUpgrade ghostscript-gtk-debuginfoUpgrade libgs-develUpgrade ghostscript-debugsourceUpgrade ghostscript-tools-fontsUpgrade ghostscript-tools-printingUpgrade ghostscript-debuginfoNo solution existsUpgrade ghostscript-x11-debuginfo | May 1, 2025 | Nov 10, 2024 |
| Rocky_linux | — | Upgrade ghostscript-debuginfoUpgrade ghostscript-tools-fontsUpgrade libgs-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-tools-printingUpgrade libgs-develUpgrade ghostscript-x11Upgrade ghostscript-x11-debuginfoUpgrade ghostscript-tools-dvipdfUpgrade libgsUpgrade ghostscript | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade ghostscriptUpgrade ghostscript-x11Upgrade ghostscript-devel | Dec 5, 2025 | May 1, 2025 |
| Ubuntu | — | Upgrade libgs10Upgrade ghostscriptUpgrade libgs9 | Nov 13, 2024 | Nov 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub