Buffer overflow in Ghostscript - CVE-2025-27830

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU106096

Buffer overflow in Ghostscript - CVE-2025-27830

Published: March 27, 2025


Vulnerability identifier: #VU106096
CSH Severity: High
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-27830
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in base/write_t1.c and psi/zfapi.c files. A remote attacker can create a specially crafted document, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Affected software

Ghostscript
Gentoo Linux
Debian Linux
openEuler
Ubuntu
Fedora
Rapid Infrastructure Automation
ghostscript (Ubuntu package)
libgs9 (Ubuntu package)
ghostscript-tools-dvipdf
ghostscript-devel
ghostscript-debugsource
ghostscript-debuginfo
ghostscript-help
ghostscript
ghostscript (Debian package)
libgs10 (Ubuntu package)
app-text/ghostscript-gpl

How to mitigate CVE-2025-27830

Install updates from vendor's website.

Ghostscript - update to 10.05.0
Rapid Infrastructure Automation - update to 1.1.5.3
ghostscript (Ubuntu package) - addressed in versions 9.50~dfsg-5ubuntu4.15, 9.55.0~dfsg1-0ubuntu5.11, 10.02.1~dfsg1-0ubuntu7.5, 10.03.1~dfsg1-0ubuntu2.2
libgs9 (Ubuntu package) - addressed in versions 9.50~dfsg-5ubuntu4.15, 9.55.0~dfsg1-0ubuntu5.11
ghostscript-tools-dvipdf - addressed in versions 9.52-21, 9.55.0-18, 9.55.0-19, 9.56.1-15
ghostscript-devel - addressed in versions 9.52-21, 9.55.0-18, 9.55.0-19, 9.56.1-15
ghostscript-debugsource - addressed in versions 9.52-21, 9.55.0-18, 9.55.0-19, 9.56.1-15
ghostscript-debuginfo - addressed in versions 9.52-21, 9.55.0-18, 9.55.0-19, 9.56.1-15
ghostscript-help - addressed in versions 9.52-21, 9.55.0-18, 9.55.0-19, 9.56.1-15
ghostscript - addressed in versions 9.52-21, 9.55.0-18, 9.55.0-19, 9.56.1-15
ghostscript (Debian package) - update to 10.0.0~dfsg-11+deb12u7
libgs10 (Ubuntu package) - addressed in versions 10.02.1~dfsg1-0ubuntu7.5, 10.03.1~dfsg1-0ubuntu2.2
ghostscript - addressed in versions 10.02.1-14.fc40, 10.03.1-5.fc41
app-text/ghostscript-gpl - update to 10.05.1

External References

Related Security Bulletins