CVE-2025-27837
published 2025-03-25CVE-2025-27837: An issue was discovered in Artifex Ghostscript before 10.05.0. Access to arbitrary files can occur through a truncated path with invalid UTF-8 characters, for…
PriorityP356critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.59%
46.2th percentile
An issue was discovered in Artifex Ghostscript before 10.05.0. Access to arbitrary files can occur through a truncated path with invalid UTF-8 characters, for base/gp_mswin.c and base/winrtsup.cpp.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| artifex | ghostscript | < 10.05.0 | 10.05.0 |
| artifex | ghostscript | >= 0 < 10.05.0 | 10.05.0 |
| artifex | ghostscript | >= 0 < 10.05.0-r0 | 10.05.0-r0 |
| artifex | ghostscript | >= 0 < 10.05.0-r0 | 10.05.0-r0 |
| artifex | ghostscript | >= 0 < 10.05.0-r0 | 10.05.0-r0 |
| artifex | ghostscript | >= 0 < 10.05.0-r0 | 10.05.0-r0 |
| artifex | ghostscript | >= 0 < 10.05.0-r0 | 10.05.0-r0 |
| debian | ghostscript | — | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv9.8CRITICAL
vendor_debian9.8LOW
vendor_redhat9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-rmm8-wf49-vvww: An issue was discovered in Artifex Ghostscript before 10
ghsa_unreviewed·2025-03-25
CVE-2025-27837 [CRITICAL] CWE-22 GHSA-rmm8-wf49-vvww: An issue was discovered in Artifex Ghostscript before 10
An issue was discovered in Artifex Ghostscript before 10.05.0. Access to arbitrary files can occur through a truncated path with invalid UTF-8 characters, for base/gp_mswin.c and base/winrtsup.cpp.
OSV
CVE-2025-27837: An issue was discovered in Artifex Ghostscript before 10
osv·2025-03-25·CVSS 9.8
CVE-2025-27837 [CRITICAL] CVE-2025-27837: An issue was discovered in Artifex Ghostscript before 10
An issue was discovered in Artifex Ghostscript before 10.05.0. Access to arbitrary files can occur through a truncated path with invalid UTF-8 characters, for base/gp_mswin.c and base/winrtsup.cpp.
OSV
CVE-2025-27837: Access to arbitrary files through truncated path with invalid UTF-8
osv·2025-03-19·CVSS 9.8
CVE-2025-27837 [CRITICAL] CVE-2025-27837: Access to arbitrary files through truncated path with invalid UTF-8
Access to arbitrary files through truncated path with invalid UTF-8
Red Hat
Ghostscript: Access to arbitrary files through truncated path with invalid UTF-8
vendor_redhat·2025-03-25·CVSS 9.8
CVE-2025-27837 [CRITICAL] CWE-22 Ghostscript: Access to arbitrary files through truncated path with invalid UTF-8
Ghostscript: Access to arbitrary files through truncated path with invalid UTF-8
An issue was discovered in Artifex Ghostscript before 10.05.0. Access to arbitrary files can occur through a truncated path with invalid UTF-8 characters, for base/gp_mswin.c and base/winrtsup.cpp.
A flaw was found in Artifex Ghostscript. This vulnerability allows potential access to arbitrary files through a truncated path when invalid UTF-8 characters are used. The affected code areas are within base/gp_mswin.c and base/winrtsup.cpp. system.
Statement: As this flaw only affects windows-specific platform code, Red Hat products are not affected.
Mitigation: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease
Debian
CVE-2025-27837: ghostscript - An issue was discovered in Artifex Ghostscript before 10.05.0. Access to arbitra...
vendor_debian·2025·CVSS 9.8
CVE-2025-27837 [CRITICAL] CVE-2025-27837: ghostscript - An issue was discovered in Artifex Ghostscript before 10.05.0. Access to arbitra...
An issue was discovered in Artifex Ghostscript before 10.05.0. Access to arbitrary files can occur through a truncated path with invalid UTF-8 characters, for base/gp_mswin.c and base/winrtsup.cpp.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-03-25
Published