high7.8
CVE-2019-25059
Artifex Ghostscript through 9.26 mishandles .completefont.
Impact
Artifex Ghostscript through 9.26 mishandles .completefont. NOTE: this issue exists because of an incomplete fix for CVE-2019-3839.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Artifex | Ghostscript | through 9.26 |
| Debian | Debian Linux | Version 9.0 |
References
- NVD record
- CVE.org record
- http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=430e219ea17a2650577d70021399c4ead05869e0
- https://lists.debian.org/debian-lts-announce/2022/05/msg00000.html
- http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=430e219ea17a2650577d70021399c4ead05869e0
- https://lists.debian.org/debian-lts-announce/2022/05/msg00000.html