CVE-2020-27792 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Ghostscript
Severity
7.1HIGHNVD
EPSS
0.1%
top 83.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 19
Latest updateSep 27
Description
A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF file, triggering the heap buffer overflow that could lead to memory corruption or a denial of service.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:HExploitability: 1.8 | Impact: 5.2
Affected Packages3 packages
Also affects: Debian Linux 10.0
🔴Vulnerability Details
4GHSA▶
GHSA-7h9w-vh8m-rj5g: A heap-based buffer over write vulnerability was found in GhostScript's lp8000_print_page() function in gdevlp8k↗2022-08-20
OSV▶
CVE-2020-27792: A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k↗2022-08-19
CVEList▶
Ghostscript: heap buffer over write vulnerability in ghostscript's lp8000_print_page() in gdevlp8k.c↗2022-08-19