CVE-2025-27831
An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has...
An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.
- Record
CVE-2025-27831- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
EUVDEUVD-2025-8087
An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.
- Record
EUVD-2025-8087- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-x74r-f89v-3jw9
An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has...
An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.
- Record
GHSA-x74r-f89v-3jw9- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
NVD
An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.
- Record
CVE-2025-27831- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
OSVALPINE-CVE-2025-27831
An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.
- Record
ALPINE-CVE-2025-27831- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVBELL-CVE-2025-27831
- Record
BELL-CVE-2025-27831- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 14 moreShow less
OSV
An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.
- Record
CVE-2025-27831- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2025-27831
An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.
- Record
DEBIAN-CVE-2025-27831- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2025-1398
ghostscript security update
Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.
Security Fix(es):
An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.(CVE-2025-27831)
- Record
OESA-2025-1398- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2025-1399
ghostscript security update
Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.
Security Fix(es):
An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.(CVE-2025-27831)
- Record
OESA-2025-1399- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2025-1400
ghostscript security update
Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.
Security Fix(es):
An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.(CVE-2025-27831)
- Record
OESA-2025-1400- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2025-1401
ghostscript security update
Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.
Security Fix(es):
An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.(CVE-2025-27831)
- Record
OESA-2025-1401- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-27831
An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.
- Record
UBUNTU-CVE-2025-27831- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVCLSA-2026-1775120182 No score
ghostscript: Fix of 4 CVEs
- CVE-2025-27830: fix potential buffer overflow with DollarBlend in font serialization
- CVE-2025-27831: prevent Unicode decoding overrun in txtwrite/docxwrite devices
- CVE-2025-27835: fix confusion between bytes and shorts in glyph to Unicode conversion
- CVE-2025-27836: fix potential print buffer overflow in BJ10V device
- Record
CLSA-2026-1775120182- Updated
- 2026-11-02
OSVCLSA-2026-1775210556 No score
ghostscript: Fix of 4 CVEs
- CVE-2025-27830: fix potential buffer overflow with DollarBlend in font serialization
- CVE-2025-27831: prevent Unicode decoding overrun in txtwrite/docxwrite devices
- CVE-2025-27835: fix confusion between bytes and shorts in glyph to Unicode conversion
- CVE-2025-27836: fix potential print buffer overflow in BJ10V device
- Record
CLSA-2026-1775210556- Updated
- 2026-11-02
OSVMGASA-2025-0098 No score
Updated ghostscript packages fix security vulnerabilities
This release addresses CVEs: CVE-2025-27835, CVE-2025-27832, CVE-2025-27831, CVE-2025-27836, CVE-2025-27830, CVE-2025-27833, CVE-2025-27837, CVE-2025-27834 The 10.05.0 release deprecates the non-standard operator "selectdevice", all code should now be using the standard "setpagedevice" operator. "selectdevice" will be removed in the 10.06.0 release. We now support production of PDF/X-1a and PDF/X-4a in addition to the existing support for PDF/X-3
- Record
MGASA-2025-0098- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:14953-1 No score
ghostscript-10.05.0-1.1 on GA media
These are all security issues fixed in the ghostscript-10.05.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:14953-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:1118-1 No score
Security update for ghostscript
This update for ghostscript fixes the following issues:
- CVE-2025-27831: Fixed text buffer overflow in DOCXWRITE TXTWRITE device via long characters to devices/vector/doc_common.c (bsc#1240075)
- CVE-2025-27832: Fixed compression buffer overflow in NPDL device for contrib/japanese/gdevnpdl.c (bsc#1240077)
- CVE-2025-27835: Fixed buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c (bsc#1240080)
- CVE-2025-27836: Fixed Print buffer overflow in BJ10V device in contrib/japanese/gdev10v.c (bsc#1240081)
- Record
SUSE-SU-2025:1118-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:1127-1 No score
Security update for ghostscript
This update for ghostscript fixes the following issues:
- CVE-2025-27831: Fixed text buffer overflow in DOCXWRITE TXTWRITE device via long characters to devices/vector/doc_common.c (bsc#1240075)
- CVE-2025-27832: Fixed compression buffer overflow in NPDL device for contrib/japanese/gdevnpdl.c (bsc#1240077)
- CVE-2025-27835: Fixed buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c (bsc#1240080)
- CVE-2025-27836: Fixed Print buffer overflow in BJ10V device in contrib/japanese/gdev10v.c (bsc#1240081)
- Record
SUSE-SU-2025:1127-1- Updated
- 2026-11-02
OSVUSN-7378-1 No score
ghostscript vulnerabilities
It was discovered that Ghostscript incorrectly serialized DollarBlend in certain fonts. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-27830)
It was discovered that Ghostscript incorrectly handled the DOCXWRITE TXTWRITE device. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 24.10. (CVE-2025-27831)
It was discovered that Ghostscript incorrectly handled the NPDL device. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-27832)
It was discovered that Ghostscript incorrectly handled certain long TTF file names. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 24.04 LTS and Ubuntu 24.10. (CVE-2025-27833)
It was discovered that Ghostscript incorrectly handled oversized Type 4 functions in certain PDF documents. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 24.10. (CVE-2025-27834)
It was discovered that Ghostscript incorrectly handled converting certain glyphs to Unicode. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-27835)
It was discovered that Ghostscript incorrectly handled the BJ10V device. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-27836)
- Record
USN-7378-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ghostscriptAlpine:v3.18 |
before 10.05.0 | 10.05.0 |
ghostscriptAlpine:v3.19 |
before 10.05.0-r0 | 10.05.0-r0 |
ghostscriptAlpine:v3.20 |
before 10.05.0-r0 | 10.05.0-r0 |
ghostscriptAlpine:v3.21 |
before 10.05.0-r0 | 10.05.0-r0 |
ghostscriptAlpine:v3.22 |
before 10.05.0-r0 | 10.05.0-r0 |
ghostscriptAlpine:v3.23 |
before 10.05.0-r0 | 10.05.0-r0 |
ghostscriptAlpine:v3.24 |
before 10.05.0-r0 | 10.05.0-r0 |
ghostscriptAlpaquita:23 |
10.0.0-r0 up to 10.01.2-r4 | 10.01.2-r4 |
ghostscriptAlpaquita:stream |
10.0.0-r0 up to 10.05.0-r0 | 10.05.0-r0 |
ghostscriptTuxCare:AlmaLinux:9.2 From an advisory covering 4 CVEs |
before 9.54.0-11.el9_2.tuxcare.els10 | 9.54.0-11.el9_2.tuxcare.els10 |
Show 51 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ghostscript-docTuxCare:AlmaLinux:9.2 From an advisory covering 4 CVEs |
before 9.54.0-11.el9_2.tuxcare.els10 | 9.54.0-11.el9_2.tuxcare.els10 |
ghostscript-gtkTuxCare:AlmaLinux:9.2 From an advisory covering 4 CVEs |
before 9.54.0-11.el9_2.tuxcare.els10 | 9.54.0-11.el9_2.tuxcare.els10 |
ghostscript-tools-dvipdfTuxCare:AlmaLinux:9.2 From an advisory covering 4 CVEs |
before 9.54.0-11.el9_2.tuxcare.els10 | 9.54.0-11.el9_2.tuxcare.els10 |
ghostscript-tools-fontsTuxCare:AlmaLinux:9.2 From an advisory covering 4 CVEs |
before 9.54.0-11.el9_2.tuxcare.els10 | 9.54.0-11.el9_2.tuxcare.els10 |
ghostscript-tools-printingTuxCare:AlmaLinux:9.2 From an advisory covering 4 CVEs |
before 9.54.0-11.el9_2.tuxcare.els10 | 9.54.0-11.el9_2.tuxcare.els10 |
ghostscript-x11TuxCare:AlmaLinux:9.2 From an advisory covering 4 CVEs |
before 9.54.0-11.el9_2.tuxcare.els10 | 9.54.0-11.el9_2.tuxcare.els10 |
libgsTuxCare:AlmaLinux:9.2 From an advisory covering 4 CVEs |
before 9.54.0-11.el9_2.tuxcare.els10 | 9.54.0-11.el9_2.tuxcare.els10 |
libgs-develTuxCare:AlmaLinux:9.2 From an advisory covering 4 CVEs |
before 9.54.0-11.el9_2.tuxcare.els10 | 9.54.0-11.el9_2.tuxcare.els10 |
ghostscriptTuxCare:AlmaLinux:9.6 From an advisory covering 4 CVEs |
before 9.54.0-19.el9_6.tuxcare.els1 | 9.54.0-19.el9_6.tuxcare.els1 |
ghostscript-docTuxCare:AlmaLinux:9.6 From an advisory covering 4 CVEs |
before 9.54.0-19.el9_6.tuxcare.els1 | 9.54.0-19.el9_6.tuxcare.els1 |
ghostscript-gtkTuxCare:AlmaLinux:9.6 From an advisory covering 4 CVEs |
before 9.54.0-19.el9_6.tuxcare.els1 | 9.54.0-19.el9_6.tuxcare.els1 |
ghostscript-tools-dvipdfTuxCare:AlmaLinux:9.6 From an advisory covering 4 CVEs |
before 9.54.0-19.el9_6.tuxcare.els1 | 9.54.0-19.el9_6.tuxcare.els1 |
ghostscript-tools-fontsTuxCare:AlmaLinux:9.6 From an advisory covering 4 CVEs |
before 9.54.0-19.el9_6.tuxcare.els1 | 9.54.0-19.el9_6.tuxcare.els1 |
ghostscript-tools-printingTuxCare:AlmaLinux:9.6 From an advisory covering 4 CVEs |
before 9.54.0-19.el9_6.tuxcare.els1 | 9.54.0-19.el9_6.tuxcare.els1 |
ghostscript-x11TuxCare:AlmaLinux:9.6 From an advisory covering 4 CVEs |
before 9.54.0-19.el9_6.tuxcare.els1 | 9.54.0-19.el9_6.tuxcare.els1 |
libgsTuxCare:AlmaLinux:9.6 From an advisory covering 4 CVEs |
before 9.54.0-19.el9_6.tuxcare.els1 | 9.54.0-19.el9_6.tuxcare.els1 |
libgs-develTuxCare:AlmaLinux:9.6 From an advisory covering 4 CVEs |
before 9.54.0-19.el9_6.tuxcare.els1 | 9.54.0-19.el9_6.tuxcare.els1 |
ghostscriptDebian:12 |
before 10.0.0~dfsg-11+deb12u7, plus listed versions 10.0.0~dfsg-1110.0.0~dfsg-11+deb12u110.0.0~dfsg-11+deb12u210.0.0~dfsg-11+deb12u310.0.0~dfsg-11+deb12u410.0.0~dfsg-11+deb12u510.0.0~dfsg-11+deb12u6 |
10.0.0~dfsg-11+deb12u7 |
ghostscriptDebian:13 |
before 10.05.0~dfsg-1 | 10.05.0~dfsg-1 |
ghostscriptDebian:14 |
before 10.05.0~dfsg-1 | 10.05.0~dfsg-1 |
ghostscriptDebian:11 From an advisory covering 5 CVEs |
before 9.53.3~dfsg-7+deb11u10, plus listed versions 9.53.3~dfsg-79.53.3~dfsg-7+deb11u19.53.3~dfsg-7+deb11u29.53.3~dfsg-7+deb11u39.53.3~dfsg-7+deb11u4 Show 5 moreShow less9.53.3~dfsg-7+deb11u59.53.3~dfsg-7+deb11u69.53.3~dfsg-7+deb11u79.53.3~dfsg-7+deb11u89.53.3~dfsg-7+deb11u9 |
9.53.3~dfsg-7+deb11u10 |
ghostscriptDebian:12 From an advisory covering 7 CVEs |
before 10.0.0~dfsg-11+deb12u7, plus listed versions 10.0.0~dfsg-1110.0.0~dfsg-11+deb12u110.0.0~dfsg-11+deb12u210.0.0~dfsg-11+deb12u310.0.0~dfsg-11+deb12u410.0.0~dfsg-11+deb12u510.0.0~dfsg-11+deb12u6 |
10.0.0~dfsg-11+deb12u7 |
ghostscriptMageia:9 From an advisory covering 8 CVEs |
before 10.05.0-1.mga9 | 10.05.0-1.mga9 |
ghostscriptopenEuler:22.03-LTS-SP3 |
before 9.55.0-20.oe2203sp3 | 9.55.0-20.oe2203sp3 |
ghostscriptopenEuler:22.03-LTS-SP4 |
before 9.55.0-20.oe2203sp4 | 9.55.0-20.oe2203sp4 |
ghostscriptopenEuler:24.03-LTS |
before 9.56.1-16.oe2403 | 9.56.1-16.oe2403 |
ghostscriptopenEuler:24.03-LTS-SP1 |
before 9.56.1-16.oe2403sp1 | 9.56.1-16.oe2403sp1 |
ghostscriptSUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 4 CVEs |
before 9.52-23.89.1 | 9.52-23.89.1 |
ghostscriptSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 4 CVEs |
before 9.52-23.89.1 | 9.52-23.89.1 |
ghostscriptSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Manager Proxy 4.3 From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Manager Server 4.3 From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Enterprise Storage 7.1 From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptopenSUSE:Leap 15.6 From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptUbuntu:22.04:LTS |
before 9.55.0~dfsg1-0ubuntu5.11, plus listed versions 9.54.0~dfsg1-0ubuntu29.55.0~dfsg1-0ubuntu49.55.0~dfsg1-0ubuntu59.55.0~dfsg1-0ubuntu5.19.55.0~dfsg1-0ubuntu5.2 Show 7 moreShow less9.55.0~dfsg1-0ubuntu5.39.55.0~dfsg1-0ubuntu5.49.55.0~dfsg1-0ubuntu5.59.55.0~dfsg1-0ubuntu5.69.55.0~dfsg1-0ubuntu5.79.55.0~dfsg1-0ubuntu5.99.55.0~dfsg1-0ubuntu5.10 |
9.55.0~dfsg1-0ubuntu5.11 |
ghostscriptUbuntu:24.04:LTS |
before 10.02.1~dfsg1-0ubuntu7.5, plus listed versions 10.01.2~dfsg1-0ubuntu210.01.2~dfsg1-0ubuntu2.110.02.1~dfsg1-0ubuntu110.02.1~dfsg1-0ubuntu210.02.1~dfsg1-0ubuntu5 Show 5 moreShow less10.02.1~dfsg1-0ubuntu610.02.1~dfsg1-0ubuntu710.02.1~dfsg1-0ubuntu7.110.02.1~dfsg1-0ubuntu7.310.02.1~dfsg1-0ubuntu7.4 |
10.02.1~dfsg1-0ubuntu7.5 |
ghostscriptUbuntu:20.04:LTS From an advisory covering 7 CVEs |
before 9.50~dfsg-5ubuntu4.15, plus listed versions 9.27~dfsg+0-0ubuntu39.27~dfsg+0-0ubuntu49.50~dfsg-5ubuntu19.50~dfsg-5ubuntu29.50~dfsg-5ubuntu3 Show 15 moreShow less9.50~dfsg-5ubuntu49.50~dfsg-5ubuntu4.19.50~dfsg-5ubuntu4.29.50~dfsg-5ubuntu4.39.50~dfsg-5ubuntu4.49.50~dfsg-5ubuntu4.59.50~dfsg-5ubuntu4.69.50~dfsg-5ubuntu4.79.50~dfsg-5ubuntu4.89.50~dfsg-5ubuntu4.99.50~dfsg-5ubuntu4.109.50~dfsg-5ubuntu4.119.50~dfsg-5ubuntu4.129.50~dfsg-5ubuntu4.139.50~dfsg-5ubuntu4.14 |
9.50~dfsg-5ubuntu4.15 |
ghostscriptUbuntu:22.04:LTS From an advisory covering 7 CVEs |
before 9.55.0~dfsg1-0ubuntu5.11, plus listed versions 9.54.0~dfsg1-0ubuntu29.55.0~dfsg1-0ubuntu49.55.0~dfsg1-0ubuntu59.55.0~dfsg1-0ubuntu5.19.55.0~dfsg1-0ubuntu5.2 Show 7 moreShow less9.55.0~dfsg1-0ubuntu5.39.55.0~dfsg1-0ubuntu5.49.55.0~dfsg1-0ubuntu5.59.55.0~dfsg1-0ubuntu5.69.55.0~dfsg1-0ubuntu5.79.55.0~dfsg1-0ubuntu5.99.55.0~dfsg1-0ubuntu5.10 |
9.55.0~dfsg1-0ubuntu5.11 |
ghostscriptUbuntu:24.04:LTS From an advisory covering 7 CVEs |
before 10.02.1~dfsg1-0ubuntu7.5, plus listed versions 10.01.2~dfsg1-0ubuntu210.01.2~dfsg1-0ubuntu2.110.02.1~dfsg1-0ubuntu110.02.1~dfsg1-0ubuntu210.02.1~dfsg1-0ubuntu5 Show 5 moreShow less10.02.1~dfsg1-0ubuntu610.02.1~dfsg1-0ubuntu710.02.1~dfsg1-0ubuntu7.110.02.1~dfsg1-0ubuntu7.310.02.1~dfsg1-0ubuntu7.4 |
10.02.1~dfsg1-0ubuntu7.5 |
ghostscriptopenSUSE:Tumbleweed From an advisory covering 8 CVEs |
before 10.05.0-1.1 | 10.05.0-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-27831 is a critical vulnerability (CVSS 9.8) in Artifex Ghostscript, published March 15, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.60%, the 49th percentile. Fixed in ghostscript 10.05.0.
References
bugs.ghostscript.com/show_bug.cgi?id=708132
lists.debian.org/debian-lts-announce/2025/04/msg00014.html
nvd.nist.gov/vuln/detail/CVE-2025-27831
github.com/advisories/GHSA-x74r-f89v-3jw9
security.alpinelinux.org/vuln/CVE-2025-27831
docs.bell-sw.com/security/cves/CVE-2025-27831
Show 33 moreShow less
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1775120182.html
security-tracker.debian.org/tracker/CVE-2025-27831
advisories.mageia.org/MGASA-2025-0098.html
bugs.mageia.org/show_bug.cgi?id=34088
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1398
suse.com/support/update/announcement/2025/suse-su-20251118-1
bugzilla.suse.com/1240075
ubuntu.com/security/CVE-2025-27831
cve.org/CVERecord?id=CVE-2025-27831
lists.opensuse.org/archives/list/[email protected]/thread/GBB65P3KU5MBN7SLCFPCDEZ3Y2ACRGXP