CVE-2017-9620

2017-07-2619:00:00

mitre

www.cve.org

7.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.2%

JSON

The xps_select_font_encoding function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document, related to the xps_encode_font_char_imp function.