Every CVE Search/ Get API key

OSV-2021-717

Heap-use-after-free in real_param

No scoreFix available

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33862

Crash type: Heap-use-after-free READ 1
Crash state:
real_param
zpdfinkpath
interp

What each source reports

OSV No score

Heap-use-after-free in real_param

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33862

Crash type: Heap-use-after-free READ 1
Crash state:
real_param
zpdfinkpath
interp
Record
OSV-2021-717
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
ghostscript
OSS-Fuzz
Listed versions, plus commit ranges
ghostpdl-9.28rc2ghostpdl-9.28rc3ghostpdl-9.28rc4ghostpdl-9.50ghostpdl-9.51
Show 25 moreShow less
ghostpdl-9.51rc1ghostpdl-9.51rc2ghostpdl-9.51rc2_testghostpdl-9.51rc2_test2ghostpdl-9.51rc3ghostpdl-9.52ghostpdl-9.52-test-base-1ghostpdl-9.52-test-base-3ghostpdl-9.52-test-base-4ghostpdl-9.52.1ghostpdl-9.53.0ghostpdl-9.53.0-test-base-0ghostpdl-9.53.0rc1ghostpdl-9.53.0rc2ghostpdl-9.53.1ghostpdl-9.53.2ghostpdl-9.53.3ghostpdl-9.54.0ghostpdl-9.54.0-test-base-0ghostpdl-9.54.0rc1_testghostscript-9.50ghostscript-9.51ghostscript-9.52gpdf_alpha1rjj_9.53.2_test
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2021-717 is a vulnerability with no CVSS score yet in ghostscript, published May 2, 2021. No source lists public exploit code. A source reports a fix.

References

MoveEnter Open