CVE-2025-27831
published 2025-03-25CVE-2025-27831: An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to…
critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| artifex | ghostscript | < 10.05.0 | 10.05.0 |
| artifex | ghostscript | >= 0 < 9.53.3~dfsg-7+deb11u10 | 9.53.3~dfsg-7+deb11u10 |
| artifex | ghostscript | >= 0 < 10.0.0~dfsg-11+deb12u7 | 10.0.0~dfsg-11+deb12u7 |
| artifex | ghostscript | >= 0 < 10.05.0~dfsg-1 | 10.05.0~dfsg-1 |
| artifex | ghostscript | >= 0 < 10.05.0~dfsg-1 | 10.05.0~dfsg-1 |
| artifex | ghostscript | >= 0 < 9.50~dfsg-5ubuntu4.15 | 9.50~dfsg-5ubuntu4.15 |
| artifex | ghostscript | >= 0 < 9.55.0~dfsg1-0ubuntu5.11 | 9.55.0~dfsg1-0ubuntu5.11 |
| artifex | ghostscript | >= 0 < 10.02.1~dfsg1-0ubuntu7.5 | 10.02.1~dfsg1-0ubuntu7.5 |
| debian | ghostscript | < ghostscript 10.0.0~dfsg-11+deb12u7 (bookworm) | ghostscript 10.0.0~dfsg-11+deb12u7 (bookworm) |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv9.8CRITICAL