CVE-2025-27836

An issue was discovered in Artifex Ghostscript before 10.05.0

Critical · published March 25, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
48.2
In the wild
Unconfirmed
What it is

🔥 A print buffer overflow in Artifex Ghostscript can lead to some seriously chaotic outcomes — and all because of an overlooked device in the contrib directory! Think of it as a crowded restaurant where the chef keeps ordering more supplies without checking the order list. Eventually, the kitchen overflows with extra ingredients, and chaos ensues as they spill all over the floor! An attacker could exploit this vulnerability to crash the printing service or potentially execute arbitrary code. This means they could gain control over the affected systems, leading to a complete compromise of sensitive data or critical infrastructure! Absolutely devastating!

Put simply

Think of it as a crowded restaurant where the chef keeps ordering more supplies without checking the order list. Eventually, the kitchen overflows with extra ingredients, and chaos ensues as they spill all over the floor! This vulnerability exists in the BJ10V device code, where improper handling of print buffers allows for an overflow, making it possible for attackers to manipulate the process without proper checks.

What to do

An attacker could exploit this vulnerability to crash the printing service or potentially execute arbitrary code. This means they could gain control over the affected systems, leading to a complete compromise of sensitive data or critical infrastructure! Absolutely devastating! Update to Artifex Ghostscript version 10.05.0 or later immediately to close this security hole. Additionally, review your current deployment for any potential exposure to untrusted print jobs. It's crucial to ensure that buffer sizes are adequately managed! You've got this! By taking these steps, you'll be well on your way to locking down your systems. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00604 · 48.2th percentile
Published
2025-03-25T00:00Z
EPSS history
Timeline
  • 25 MAR 00:00Z
    An issue was discovered in Artifex Ghostscript before 10.05.0
    cvelistv5