An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libgs-develUpgrade ghostscriptUpgrade ghostscript-gtkUpgrade libgsUpgrade ghostscript-cupsUpgrade ghostscript-docUpgrade ghostscript-debuginfo | Feb 26, 2025 | Nov 10, 2024 |
| Amazon_linux_2023 | — | Upgrade libgsUpgrade ghostscript-tools-fontsUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-tools-printingUpgrade ghostscript-debuginfoUpgrade libgs-debuginfoUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-gtkUpgrade ghostscriptUpgrade ghostscript-debugsourceUpgrade libgs-develUpgrade ghostscript-docUpgrade ghostscript-x11Upgrade ghostscript-gtk-debuginfo | Feb 26, 2025 | Nov 10, 2024 |
| Debian | — | Upgrade ghostscript | Nov 18, 2024 | Nov 10, 2024 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Jan 24, 2025 | Nov 10, 2024 |
| Ghostscript | — | Upgrade to Ghostscript version 10.04.0 | Nov 19, 2024 | Nov 10, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscriptUpgrade ghostscript-help | Jan 14, 2025 | Nov 10, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ghostscriptUpgrade ghostscript-help | Jan 15, 2025 | Nov 10, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 10, 2024 |
| Suse | — | Upgrade ghostscriptUpgrade ghostscript-x11Upgrade ghostscript-devel | Dec 5, 2025 | Nov 7, 2024 |
| Ubuntu | — | Upgrade ghostscriptUpgrade libgs10Upgrade libgs9Upgrade libgs9 (Ubuntu Pro) | Nov 13, 2024 | Nov 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub