vulnerability

Artifex Software Inc. Ghostscript: CVE-2025-27835: Buffer Copy without Checking Size of Input

Severity

CVSS

(AV:L/AC:M/Au:N/C:C/I:C/A:C)

Published

Mar 25, 2025

Added

Apr 14, 2025

Modified

Jun 18, 2026

Description

An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c.

ghostscript-upgrade-latest

Rapid7 Labs

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.