CVE-2025-27832

An issue was discovered in Artifex Ghostscript before 10.05.0

Critical · published March 25, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
57.4
In the wild
Unconfirmed
What it is

🔥 A buffer overflow in Artifex Ghostscript before version 10.05.0 can turn a simple print job into a full-blown chaos engine! Think of it like a pastries delivery service that accidentally squeezes too many orders into a box, causing it to burst open—disaster everywhere! This compression buffer overflow can lead to arbitrary code execution, giving attackers a free pass to wreak havoc on your system. An attacker could exploit this vulnerability to execute malicious code on the server, potentially accessing sensitive data or compromising the entire system. If left unpatched, this flaw could lead to an absolute nightmare situation for users, with data leaks and unauthorized access becoming a harsh reality.

Put simply

Think of it like a pastries delivery service that accidentally squeezes too many orders into a box, causing it to burst open—disaster everywhere! This compression buffer overflow can lead to arbitrary code execution, giving attackers a free pass to wreak havoc on your system. This vulnerability is a compression buffer overflow in the NPDL device of Ghostscript. It allows attackers to overwrite memory, leading to the possibility of executing arbitrary code when processing specially crafted PostScript files.

What to do

An attacker could exploit this vulnerability to execute malicious code on the server, potentially accessing sensitive data or compromising the entire system. If left unpatched, this flaw could lead to an absolute nightmare situation for users, with data leaks and unauthorized access becoming a harsh reality. Upgrade to Ghostscript version 10.05.0 or later immediately to mitigate this risk. Regularly audit your deployment for any suspicious activity, and consider implementing additional security measures to safeguard against future attacks. You've got this! Follow these steps, and you'll be a security hero in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00840 · 57.4th percentile
Published
2025-03-25T00:00Z
EPSS history
Timeline
  • 25 MAR 00:00Z
    An issue was discovered in Artifex Ghostscript before 10.05.0
    cvelistv5