The vulnerability of the xps_finish_image_path() function (device/vector/gdevxps.c) in the software suite for processing, transforming, and generating Ghostscript documents allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xpsfinishimagepath function device/vector/gdevxps.c in the software suite for processing, transforming, and generating Ghostscript documents is related to its use after release. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

PT-2020-5551

Name of the Vulnerable Software and Affected Versions GhostScript versions 9.50 Description A use-after-free issue in the xps finish image path function allows a remote attacker to escalate privileges via a crafted PDF file. This issue may impact the confidentiality, integrity, and availability o...