9.8
CVE-2020-36773
- EPSS 0.88%
- Veröffentlicht 04.02.2024 18:16:00
- Zuletzt bearbeitet 22.05.2025 18:15:23
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginArtifex Ghostscript before 9.53.0 has an out-of-bounds write and use-after-free in devices/vector/gdevtxtw.c (for txtwrite) because a single character code in a PDF document can map to more than one Unicode code point (e.g., for a ligature).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Artifex ≫ Ghostscript Version9.51
Artifex ≫ Ghostscript Version9.52
Artifex ≫ Ghostscript Version9.52.1
Artifex ≫ Ghostscript Version9.53.0 Updaterc1
Artifex ≫ Ghostscript Version9.53.0 Updaterc2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.88% | 0.543 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-416 Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
https://bugs.ghostscript.com/show_bug.cgi?id=702229
https://bugzilla.opensuse.org/show_bug.cgi?id=1177922
https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=8c7bd787defa071c96289b7da9397f673fddb874
https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/tag/gs9530