CVE-2025-48708

Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.

Security Fix(es):

gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF document includes its password in cleartext.(CVE-2025-48708)

gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF document includes its password in cleartext.

• CVE-2024-29508: heap pointer disclosure in pdf_base_font_alloc via synthesized BaseFont name
• CVE-2025-48708: argument sanitisation missed '#' separator, leaking -sUserPassword#secret values into output PDF metadata

• CVE-2025-48708: fix argument sanitization to redact values supplied with '#' separator

gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF document includes its password in cleartext. (CVE-2025-48708)

These are all security issues fixed in the ghostscript-10.05.1-1.1 package on the GA media of openSUSE Tumbleweed.

This update for ghostscript fixes the following issues:

Update to version 10.06.0.

Security issues fixed:

• CVE-2025-59800: an integer overflow can lead to a heap-based buffer overflow in ocr_line8 (bsc#1250355).
• CVE-2025-59799: a large size value can cause a stack-based buffer overflow in pdfmark_coerce_dest (bsc#1250354).
• CVE-2025-59798: stack-based buffer overflow in pdf_write_cmap can lead to a denial-of-service (bsc#1250353).
• CVE-2025-48708: lacks of argument sanitization may lead to password disclosure (bsc#1243701).
• CVE-2025-46646: mishandling of overlong utf-8 encoding in artifex ghostscript's decode_utf8 function (bsc#1257699).

Other updates and bugfixes:

• switch over to libalternatives for ghostscript to provide a gs variant (bsc#1245896)

• Version upgrade to 10.06.0:

  • removes the non-standard operator "selectdevice" (cf. the entry below dated Tue Apr 1 09:56:06 UTC 2025)

• Version upgrade to 10.05.1:

  • an overflow issue in Freetype on platforms where long is a 4 byte (rather than 8 byte) type (Microsoft Windows, for example) causing corrupted glyph rendering at higher resolutions
  • an issue with embedded files, affecting Zugferd format PDF creation.
  • broken logic in PDF Optional Content processing
  • potential slow down due to searching for identifiable font files
  • a small number of extreme edge case segmentation faults.

Root has patched CVE-2025-48708 in the ghostscript package for Root:Debian:12. Multiple fixed versions available.

This update for ghostscript fixes the following issues:

• CVE-2025-48708: Fixed password disclosure due to lacks of argument sanitization (bsc#1243701)

This update for ghostscript fixes the following issues:

• CVE-2025-48708: Fixed password disclosure due to lacks of argument sanitization (bsc#1243701)

This update for ghostscript fixes the following issues:

Update to version 10.06.0.

Security issues fixed:

• CVE-2025-59800: an integer overflow can lead to a heap-based buffer overflow in ocr_line8 (bsc#1250355).
• CVE-2025-59799: a large size value can cause a stack-based buffer overflow in pdfmark_coerce_dest (bsc#1250354).
• CVE-2025-59798: stack-based buffer overflow in pdf_write_cmap can lead to a denial-of-service (bsc#1250353).
• CVE-2025-48708: lacks of argument sanitization may lead to password disclosure (bsc#1243701).
• CVE-2025-46646: mishandling of overlong utf-8 encoding in artifex ghostscript's decode_utf8 function (bsc#1257699).

Other updates and bugfixes:

• switch over to libalternatives for ghostscript to provide a gs variant (bsc#1245896)

• Version upgrade to 10.06.0:

  • removes the non-standard operator "selectdevice" (cf. the entry below dated Tue Apr 1 09:56:06 UTC 2025)

• Version upgrade to 10.05.1:

  • an overflow issue in Freetype on platforms where long is a 4 byte (rather than 8 byte) type (Microsoft Windows, for example) causing corrupted glyph rendering at higher resolutions
  • an issue with embedded files, affecting Zugferd format PDF creation.
  • broken logic in PDF Optional Content processing
  • potential slow down due to searching for identifiable font files
  • a small number of extreme edge case segmentation faults.

It was discovered that OpenJPEG, vendored in Ghostscript did not correctly handle large image files. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2023-39327) Thomas Rinsma discovered that Ghostscript did not correctly handle printing certain variables. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2024-29508) It was discovered that Ghostscript did not correctly handle loading certain libraries. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. (CVE-2024-33871) It was discovered that Ghostscript did not correctly handle certain memory operations. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2024-56826, CVE-2024-56827, CVE-2025-27832, CVE-2025-27835, CVE-2025-27836) Vasileios Flengas discovered that Ghostscript did not correctly handle argument sanitization. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 24.10 and Ubuntu 25.04. (CVE-2025-48708)