CVE-2025-27833

An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs for a long TTF font name to pdf/pdffmap.c...

CVE-2025-27832

An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c...

CVE-2025-27836

Artifex Ghostscript versions prior to 10.05.0 are vulnerable to a Print buffer overflow in the BJ10V device, specifically located in contrib/japanese/gdev10v.c . This issue allows for potential exploitation via network vectors with low complexity and no required privileges, potentially leading to...

CVE-2025-27833

Artifex Ghostscript versions prior to 10.05.0 are vulnerable to a buffer overflow (CWE-120) occurring when processing a long TTF font name in the pdf/pdf_fmap.c file. This flaw is related to a numerical overflow condition and can be exploited to cause a service failure . For users of the GPL Ghos...

CVE-2025-27831

Artifex Ghostscript versions prior to 10.05.0 are vulnerable to a text buffer overflow in the DOCXWRITE and TXTWRITE devices. The flaw exists in devices/vector/doc_common.c and can be triggered by providing long characters . This vulnerability has been identified in various distributions, includi...

CVE-2025-27830

An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/writet1.c and psi/zfapi.c...

Artifex Ghostscript security vulnerabilities

Artifex Ghostscript is a free software package from Artifex, Inc. based on Adobe, PostScript, and the Portable Document Format page description language. A security vulnerability exists in Artifex Ghostscript versions prior to 10.05.0, which is caused by a buffer overflow during font serializatio...

CVE-2025-27830

An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/writet1.c and psi/zfapi.c...

Artifex Ghostscript path traversal vulnerability

Artifex Ghostscript is a set of free software compiled by Artifex, Inc. based on Adobe, PostScript, and the Page Description Language for Portable Document Format PDL. A security vulnerability exists in Artifex Ghostscript versions prior to 10.05.0, which originates in base/gpmswin.c and...

CVE-2025-27837

A vulnerability exists in Artifex Ghostscript versions prior to 10.05.0 due to an incorrect path name limitation in the gp_open_scratch_file_impl() function. Specifically, the issue involves the base/gp_mswin.c and base/winrtsup.cpp files, where a truncated path containing invalid UTF-8 character...

CVE-2025-27837

An issue was discovered in Artifex Ghostscript before 10.05.0. Access to arbitrary files can occur through a truncated path with invalid UTF-8 characters, for base/gpmswin.c and base/winrtsup.cpp...

CVE-2025-27837

An issue was discovered in Artifex Ghostscript before 10.05.0. Access to arbitrary files can occur through a truncated path with invalid UTF-8 characters, for base/gpmswin.c and base/winrtsup.cpp...

CVE-2025-27837: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in Artifex Ghostscript before 10.05.0. Access to arbitrary files can occur through a truncated path with invalid UTF-8 characters, for base/gpmswin.c and base/winrtsup.cpp...

CVE-2025-27837

An issue was discovered in Artifex Ghostscript before 10.05.0. Access to arbitrary files can occur through a truncated path with invalid UTF-8 characters, for base/gpmswin.c and base/winrtsup.cpp...

CVE-2025-27836: Buffer Copy without Checking Size of Input

An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c...

CVE-2025-27833: Buffer Copy without Checking Size of Input

An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs for a long TTF font name to pdf/pdffmap.c...

CVE-2025-27830: Buffer Copy without Checking Size of Input

An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/writet1.c and psi/zfapi.c...

CVE-2025-27833

An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs for a long TTF font name to pdf/pdffmap.c...

CVE-2025-27830

A buffer overflow vulnerability exists in Artifex Ghostscript before version 10.05.0 . The issue is caused by buffer copying without sufficient input size checks during the serialization of DollarBlend in a font, specifically affecting the base/write_t1.c and psi/zfapi.c files. Exploitation of th...

CVE-2025-27832

Artifex Ghostscript versions before 10.05.0 are vulnerable to a compression buffer overflow in the NPDL device (specifically within contrib/japanese/gdevnpdl.c). This flaw allows for a memory corruption condition during the processing of PostScript or PDF documents. Impact includes potential remo...