ghostscript:gstoraster_fuzzer: Segv on unknown address in gs_heap_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=6390183886454784 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: gsheapfreeobject chunkfreeobject...

ghostscript:gstoraster_fuzzer: Crash in ref_stack_counttomark

Detailed Report: https://oss-fuzz.com/testcase?key=5704546019573760 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6330000008d9 Crash State: refstackcounttomark zcounttoma...

Artifex Software Ghostscript 缓冲区错误漏洞

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files as well as print Postscript files on non-Postscrip...

ghostscript:gstoraster_fuzzer: Heap-use-after-free in gc_trace

Detailed Report: https://oss-fuzz.com/testcase?key=4523829042479104 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x62a000303b38 Crash State: gctrace...

PT-2022-7198

Name of the Vulnerable Software and Affected Versions GhostPCL version 9.55.0 Ghostscript version 9.55.0 Description A problematic vulnerability was found in the function chunk free object of the file gsmchunk.c. This issue is related to a buffer overflow. The manipulation with a malicious file...

ghostscript:gstoraster_fuzzer: Heap-buffer-overflow in template_compose_group

Detailed Report: https://oss-fuzz.com/testcase?key=6242793233711104 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7f2d8489b4d8 Crash State:...

WS-2022-0106

In ghostscript before ghostpdl-9.57.0, there is fix division by zero causing matrix with NaNs. This in turn causes MININT phases, which upsets stuff in the graphics library when attempting to fit a tile to a device in copymono...

ghostscript:gstoraster_fuzzer: Crash in s_RLE_process

Detailed Report: https://oss-fuzz.com/testcase?key=5009065605988352 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x629ff033a118 Crash State: sRLEprocess cmdputbits...

ghostscript:gstoraster_fuzzer: Crash in pdf14_buf_free

Detailed Report: https://oss-fuzz.com/testcase?key=6390481371660288 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000ffff8000 Crash State: pdf14buffree rcpdf14maskbuffre...

ghostscript:gstoraster_fuzzer: Stack-buffer-overflow in fn_ElIn_evaluate

Detailed Report: https://oss-fuzz.com/testcase?key=5393468866822144 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0x7f7ffeafd844 Crash State: fnElInevaluat...

ghostscript:gstoraster_fuzzer: Crash in pdfi_fapi_get_glyph

Detailed Report: https://oss-fuzz.com/testcase?key=5595824338370560 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000015c80000 Crash State: pdfifapigetglyph...

ghostscript:gstoraster_fuzzer: Crash in spgetcc

Detailed Report: https://oss-fuzz.com/testcase?key=6076188597026816 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62a1002ebc0b Crash State: spgetcc pdfireadbyte...

OESA-2022-1560 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: A trivial sandbox enabled with the -dSAFER option escape flaw was found in the ghostscript interpreter by injecting...

ghostscript:gstoraster_fuzzer: Null-dereference READ in gstate_clone_core

Detailed Report: https://oss-fuzz.com/testcase?key=5571707845345280 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: gstateclonecore gsgsa...

ghostscript:gstoraster_fuzzer: Crash in pdfi_read_cff_font

Detailed Report: https://oss-fuzz.com/testcase?key=6111748510318592 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62d1000be438 Crash State: pdfireadcfffont pdfiloadfont...

WS-2022-0094

Ghostscript version through 9.56.0 are vulnerable to UNKNOWN READ in pdficountcffindex...

ghostscript:gstoraster_fuzzer: Crash in pdfi_count_cff_index

Detailed Report: https://oss-fuzz.com/testcase?key=4696419984867328 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62cff772e358 Crash State: pdficountcffindex...

ghostscript:gstoraster_fuzzer: Heap-buffer-overflow in spgetcc

Detailed Report: https://oss-fuzz.com/testcase?key=6721440936755200 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x62a000005050 Crash State: spgetcc gsscantok...

ghostscript:gstoraster_fuzzer: Heap-use-after-free in gstate_free_contents

Detailed Report: https://oss-fuzz.com/testcase?key=5019015288848384 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61c000000910 Crash State: gstatefreeconten...

Ghostscript 9.50 < 9.55.0 Sandbox Escape Vulnerability - Linux

Ghostscript is prone to a sandbox escape vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...