CVE-2025-27832

Severity
9.8CRITICAL
EPSS
0.1%
top 66.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 25
Latest updateJul 8

Description

An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

NVDartifex/ghostscript< 10.05.0
Debianghostscript< 9.53.3~dfsg-7+deb11u10+3

Patches

🔴Vulnerability Details

3
GHSA
GHSA-52fg-w63x-36xq: An issue was discovered in Artifex Ghostscript before 102025-03-25
CVEList
CVE-2025-27832: An issue was discovered in Artifex Ghostscript before 102025-03-25
OSV
CVE-2025-27832: An issue was discovered in Artifex Ghostscript before 102025-03-25

📋Vendor Advisories

4
Ubuntu
Ghostscript vulnerabilities2025-07-08
Ubuntu
Ghostscript vulnerabilities2025-03-27
Red Hat
Ghostscript: NPDL device: Compression buffer overflow2025-03-25
Debian
CVE-2025-27832: ghostscript - An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device h...2025
CVE-2025-27832 (CRITICAL CVSS 9.8) | An issue was discovered in Artifex | cvebase.io