Lucene search

K
cvelistMitreCVELIST:CVE-2018-19134
HistoryDec 20, 2018 - 10:00 p.m.

CVE-2018-19134

2018-12-2022:00:00
mitre
raw.githubusercontent.com
1

7.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

64.9%

In Artifex Ghostscript through 9.25, the setpattern operator did not properly validate certain types. A specially crafted PostScript document could exploit this to crash Ghostscript or, possibly, execute arbitrary code in the context of the Ghostscript process. This is a type confusion issue because of failure to check whether the Implementation of a pattern dictionary was a structure type.

7.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

64.9%