本ページは artifex ghostscript に影響する公開済み CVE（NVD の CPE 経由で関連付け）を列挙します。各行に深刻度指標・概要・公開日が含まれます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2025-59800 | In Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdevpdfocr.c has an integer overflow that leads to a heap-based buffer overflow in ocr_line8. | [email protected] | 4.3 | 0.01% | 2025-09-22 | 2025-09-25 |
| CVE-2025-59799 | Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfmark_coerce_dest in devices/vector/gdevpdfm.c via a large size value. | [email protected] | 4.3 | 0.01% | 2025-09-22 | 2025-11-03 |
| CVE-2025-59798 | Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdf_write_cmap in devices/vector/gdevpdtw.c. | [email protected] | 4.3 | 0.01% | 2025-09-22 | 2025-11-03 |
| CVE-2025-48708 | gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF document includes its password in cleartext. | [email protected] | 4.0 | 0.01% | 2025-05-23 | 2025-06-20 |
| CVE-2025-46646 | In Artifex Ghostscript before 10.05.0, decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8 encoding. NOTE: this issue exists because of an incomplete fix for CVE-2024-46954. | [email protected] | 4.5 | 0.09% | 2025-04-26 | 2025-06-23 |
| CVE-2025-27837 | An issue was discovered in Artifex Ghostscript before 10.05.0. Access to arbitrary files can occur through a truncated path with invalid UTF-8 characters, for base/gp_mswin.c and base/winrtsup.cpp. | [email protected] | 9.8 | 0.20% | 2025-03-25 | 2025-04-01 |
| CVE-2025-27836 | An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c. | [email protected] | 9.8 | 0.17% | 2025-03-25 | 2025-11-03 |
| CVE-2025-27835 | An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c. | [email protected] | 7.8 | 0.13% | 2025-03-25 | 2025-11-03 |
| CVE-2025-27834 | An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs via an oversized Type 4 function in a PDF document to pdf/pdf_func.c. | [email protected] | 7.8 | 0.11% | 2025-03-25 | 2025-04-01 |
| CVE-2025-27833 | An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs for a long TTF font name to pdf/pdf_fmap.c. | [email protected] | 7.8 | 0.13% | 2025-03-25 | 2025-04-01 |
| CVE-2025-27832 | An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c. | [email protected] | 9.8 | 0.21% | 2025-03-25 | 2025-11-03 |
| CVE-2025-27831 | An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c. | [email protected] | 9.8 | 0.17% | 2025-03-25 | 2025-11-03 |
| CVE-2025-27830 | An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c. | [email protected] | 7.8 | 0.11% | 2025-03-25 | 2025-11-03 |
| CVE-2024-46956 | An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforall can lead to arbitrary code execution. | [email protected] | 7.8 | 0.33% | 2024-11-10 | 2025-11-03 |
| CVE-2024-46955 | An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space. | [email protected] | 5.5 | 0.05% | 2024-11-10 | 2025-11-03 |
| CVE-2024-46954 | An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal. | [email protected] | 7.8 | 0.07% | 2024-11-10 | 2025-08-15 |
| CVE-2024-46953 | An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string (for the output filename) results in path truncation, and possible path traversal and code execution. | [email protected] | 7.8 | 0.09% | 2024-11-10 | 2025-11-03 |
| CVE-2024-46952 | An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (related to W array values). | [email protected] | 7.8 | 0.05% | 2024-11-10 | 2024-11-14 |
| CVE-2024-46951 | An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation pointer in Pattern color space could lead to arbitrary code execution. | [email protected] | 7.8 | 0.11% | 2024-11-10 | 2025-11-03 |
| CVE-2024-33871 | An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver library, exploitable via a crafted PostScript document. This occurs because the Driver parameter for opvp (and oprp) devices can have an arbitrary name for a dynamic library; this library is then loaded. | [email protected] | 8.8 | 0.70% | 2024-07-03 | 2025-04-16 |