Ghostscript Vulnerability Allows for Out-of-Bounds Write and Use-After-Free in PDF Processing

CVE-2020-36773

9.8CRITICAL

Key Information

Vendor
Artifex
Status
Ghostscript
Vendor
CVE Published:
4 February 2024

Summary

Artifex Ghostscript before 9.53.0 has an out-of-bounds write and use-after-free in devices/vector/gdevtxtw.c (for txtwrite) because a single character code in a PDF document can map to more than one Unicode code point (e.g., for a ligature).

Refferences

https://bugs.ghostscript.com/show_bug.cgi?id=702229
https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3B...
https://bugzilla.opensuse.org/show_bug.cgi?id=1177922
https://github.com/ArtifexSoftware/ghostpdl-downloads/rel...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.