PT-2022-37240 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 8 crash has been reported. The crash state includes functions such as xps tifsSeekProc, TIFFRewriteDirectory, and TIFFFlush. N...

DLA-3096-1 ghostscript - security update

Bulletin has no description...

ghostscript:gs_device_ps2write_fuzzer: Crash in stream_finalize

Detailed Report: https://oss-fuzz.com/testcase?key=5319463485964288 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62a00039dac0 Crash State: streamfinalize ifreeobje...

ghostscript:gs_device_xpswrite_fuzzer: Heap-use-after-free in xps_tifsSeekProc

Detailed Report: https://oss-fuzz.com/testcase?key=5528151987453952 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicexpswritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x611000031d78 Crash State:...

PT-2022-37239 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 4 crash has been reported. The crash involves the ttfOutliner BuildGlyphOutlineAux, ttfOutliner Outline, and ngx ttf outline...

ghostscript:gs_device_ps2write_fuzzer: Heap-buffer-overflow in ttfOutliner__BuildGlyphOutlineAux

Detailed Report: https://oss-fuzz.com/testcase?key=5426429646471168 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x62a000323a2c Crash State:...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-buffer-overflow in Ins_NPUSHW

Detailed Report: https://oss-fuzz.com/testcase?key=5279742755995648 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x631000128830 Crash State: InsNPUSHW...

PT-2022-37231 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a global buffer overflow read of 8 bytes. The crash state involves several functions, including get unpack proc, xps begin typed...

ghostscript:gs_device_xpswrite_fuzzer: Global-buffer-overflow in get_unpack_proc

Detailed Report: https://oss-fuzz.com/testcase?key=5927699239010304 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicexpswritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x000001bd48b8 Crash State:...

ghostscript:gs_device_pxlcolor_fuzzer: Segv on unknown address in gs_fapi_ft_get_scaled_font

Detailed Report: https://oss-fuzz.com/testcase?key=5063796699299840 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepxlcolorfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: gsfapiftgetscaledfont...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-buffer-overflow in Ins_NPUSHB

Detailed Report: https://oss-fuzz.com/testcase?key=5394027238785024 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x625000090d68 Crash State: InsNPUSHB...

Ubuntu: Security Advisory (USN-5396-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-46-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-2434-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-5224-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-use-after-free in pdfi_cidtype2_get_glyph_index

Detailed Report: https://oss-fuzz.com/testcase?key=4748952594939904 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x63100004c716 Crash State:...

PT-2022-37203 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 8. The crash state involves several functions, including chunk obj alloc,...

PT-2022-37202 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions gs type2 interpret, copied type1 glyph outline, and gs default...

PT-2022-37204 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN WRITE. The crash state involves several function calls, including pdfi free array, pdfi free object, and...

CVE-2020-27792

A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000printpage function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF file, triggering the heap buffer overflow that could lead to memory corruption or a denial of service...