Stack-Based Buffer Overflow in Artifex Ghostscript Software
CVE-2025-59798

4.3MEDIUM

Key Information:

Vendor

Artifex
Status
Ghostscript
Vendor
CVE Published:
22 September 2025

What is CVE-2025-59798?

Artifex Ghostscript versions up to 10.05.1 are susceptible to a stack-based buffer overflow in the pdf_write_cmap function located in the devices/vector/gdevpdtw.c source file. This vulnerability can potentially be exploited by attackers to execute arbitrary code, thereby posing a significant risk to systems utilizing this software. Users are urged to update to the latest version to ensure their systems remain secure.

Affected Version(s)

Ghostscript 0 <= 10.05.1

References

https://bugs.ghostscript.com/show_bug.cgi?id=708539
https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.gi...

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-59798 : Stack-Based Buffer Overflow in Artifex Ghostscript Software