ghostscript:gstoraster_fuzzer: Crash in pdfi_dereference

Detailed Report: https://oss-fuzz.com/testcase?key=6228219202764800 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000001eb0 Crash State: pdfidereference...

ghostscript:gstoraster_fuzzer: Global-buffer-overflow in ps_font_def_func

Detailed Report: https://oss-fuzz.com/testcase?key=5277536983056384 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Global-buffer-overflow READ Crash Address: 0x00000199def1 Crash State: psfontdeffunc...

WS-2021-0578

In ghostscript there is Heap-buffer-overflow in cmapendcodespacerangefunc...

ghostscript:gstoraster_fuzzer: Heap-buffer-overflow in insert_free

Detailed Report: https://oss-fuzz.com/testcase?key=5305430396502016 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x6310001148f8 Crash State: insertfree...

ghostscript:gstoraster_fuzzer: Crash in pdfi_read_cff_font

Detailed Report: https://oss-fuzz.com/testcase?key=5076659332579328 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x63110006dadf Crash State: pdfireadcfffont pdfiloadfont...

ghostscript:gstoraster_fuzzer: Crash in pdfi_TJ

Detailed Report: https://oss-fuzz.com/testcase?key=4980176331603968 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x113300000290 Crash State: pdfiTJ...

ghostscript:gstoraster_fuzzer: Heap-buffer-overflow in cmap_endcodespacerange_func

Detailed Report: https://oss-fuzz.com/testcase?key=4889695899746304 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x631000074850 Crash State:...

WS-2021-0514

In ghostscript there is Stack-buffer-overflow in pdficreateiccbased...

WS-2021-0585

In ghostscript there is Negative-size-param in generalendcidrangefunc...

ghostscript:gstoraster_fuzzer: Crash in chunk_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=5231136421314560 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000000158f Crash State: chunkfreeobject pdficlosefile...

ghostscript:gstoraster_fuzzer: Segv on unknown address in sreadbuf

Detailed Report: https://oss-fuzz.com/testcase?key=6416402741854208 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: sreadbuf spgetcc sgets Sanitizer:...

ghostscript:gstoraster_fuzzer: Crash in pdfi_fapi_get_gsubr

Detailed Report: https://oss-fuzz.com/testcase?key=4628019363315712 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN Crash Address: 0xf92981fb0edefb0e Crash State: pdfifapigetgsubr...

ghostscript:gstoraster_fuzzer: Negative-size-param in general_endcidrange_func

Detailed Report: https://oss-fuzz.com/testcase?key=5139487338921984 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State: generalendcidrangefunc...

Command injection in itext7-core

iTextPDF in iText before 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs aka Ghostscript command line in GhostscriptHelper.java...

GHSA-GV87-Q66H-4277 Command injection in itext7-core

iTextPDF in iText before 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs aka Ghostscript command line in GhostscriptHelper.java...

ghostscript:gstoraster_fuzzer: Stack-buffer-overflow in pdfi_create_iccbased

Detailed Report: https://oss-fuzz.com/testcase?key=4796881757143040 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0x7f5cf0346120 Crash State:...

ghostscript:gstoraster_fuzzer: Stack-buffer-overflow in pdfi_do_image

Detailed Report: https://oss-fuzz.com/testcase?key=5268450526756864 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address: 0x7fabaa685934 Crash State: pdfidoimage...

ghostscript:gstoraster_fuzzer: Segv on unknown address in gx_adjust_color_Pattern

Detailed Report: https://oss-fuzz.com/testcase?key=5074727553597440 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: gxadjustcolorPattern gssetcolor...

Command Injection

Overview com.itextpdf:itextpdf is a software developer toolkit that allows users to integrate PDF functionalities within their applications, processes or products. Affected versions of this package are vulnerable to Command Injection. An attacker controlling the filename passed to the CompareTool...

DEBIAN-CVE-2021-43113

iTextPDF in iText 7 and up to excluding 4.4.13.3 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs aka Ghostscript command line in GhostscriptHelper.java...