CVE-2025-27832
published 2025-03-25CVE-2025-27832: An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c.
critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| artifex | ghostscript | < 10.05.0 | 10.05.0 |
| artifex | ghostscript | >= 0 < 9.53.3~dfsg-7+deb11u10 | 9.53.3~dfsg-7+deb11u10 |
| artifex | ghostscript | >= 0 < 10.0.0~dfsg-11+deb12u7 | 10.0.0~dfsg-11+deb12u7 |
| artifex | ghostscript | >= 0 < 10.05.0~dfsg-1 | 10.05.0~dfsg-1 |
| artifex | ghostscript | >= 0 < 10.05.0~dfsg-1 | 10.05.0~dfsg-1 |
| artifex | ghostscript | >= 0 < 9.50~dfsg-5ubuntu4.15 | 9.50~dfsg-5ubuntu4.15 |
| artifex | ghostscript | >= 0 < 9.55.0~dfsg1-0ubuntu5.11 | 9.55.0~dfsg1-0ubuntu5.11 |
| artifex | ghostscript | >= 0 < 9.55.0~dfsg1-0ubuntu5.12 | 9.55.0~dfsg1-0ubuntu5.12 |
| artifex | ghostscript | >= 0 < 10.02.1~dfsg1-0ubuntu7.5 | 10.02.1~dfsg1-0ubuntu7.5 |
| artifex | ghostscript | >= 0 < 10.02.1~dfsg1-0ubuntu7.7 | 10.02.1~dfsg1-0ubuntu7.7 |
| artifex | ghostscript | >= 0 < 9.26~dfsg+0-0ubuntu0.16.04.14+esm9 | 9.26~dfsg+0-0ubuntu0.16.04.14+esm9 |
| artifex | ghostscript | >= 0 < 9.26~dfsg+0-0ubuntu0.18.04.18+esm4 | 9.26~dfsg+0-0ubuntu0.18.04.18+esm4 |
| artifex | ghostscript | >= 0 < 9.50~dfsg-5ubuntu4.15+esm1 | 9.50~dfsg-5ubuntu4.15+esm1 |
| debian | ghostscript | < ghostscript 10.0.0~dfsg-11+deb12u7 (bookworm) | ghostscript 10.0.0~dfsg-11+deb12u7 (bookworm) |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv9.8CRITICAL