OSV-2022-73
Heap-use-after-free in pdfi_cspace_free_callback
No score
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43904
Crash type: Heap-use-after-free READ 8
Crash state:
pdfi_cspace_free_callback
gs_cspace_final
alloc_restore_step_in
What each source reports
OSV No score
Heap-use-after-free in pdfi_cspace_free_callback
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43904
Crash type: Heap-use-after-free READ 8
Crash state:
pdfi_cspace_free_callback
gs_cspace_final
alloc_restore_step_in
- Record
OSV-2022-73- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ghostscriptOSS-Fuzz |
Listed versions, plus commit ranges ghostpdl-9.56.0-test-base-3ghostpdl-9.56.0-test-base-4ghostpdl-9.56.0-test-base-5robin-test-base-0ken_20220210_baseline Show 45 moreShow lessghostpdl-9.56.0rc1_release_tests_001ghostpdl-9.56.0-test-base-6ghostpdl-9.56.0rc1_release_tests_002ghostpdl-9.56.0rc1ghostpdl-9.56.0rc2ghostpdl-9.56.0rc2_release_tests_001ghostpdl-9.56.0ghostpdl-9.56.1_release_tests_001ghostpdl-9.56.1ghostpdl-10.0.0_release_tests_001ghostpdl-10.0.0_release_tests_002ghostpdl-10.0.0rc1ghostpdl-10.0.0rc2ghostpdl-10.0.0ghostpdl-10.01.0rc1ghostpdl-10.01.0rc2ghostpdl-10.01.0ghostpdl-10.01.1ghostpdl-10.02.0-test-base-001ghostpdl-10.01.1-gse-10174rjw-testghostpdl-10.01.2ghostpdl-10.02.0rc1ghostpdl-10.02.0rc2ghostpdl-10.02.0ghostpdl-10.02.1ghostpdl-10.03.0rc1_testghostpdl-10.03.0rc1_test002ghostpdl-10.03.0rc1_test003ghostpdl-10.03.0rc1ghostpdl-10.03.0_test001ghostpdl-10.03.0_test002robin_test_refghostpdl-10.03.0ghostpdl-10.03.1ghostpdl-10.04.0rc1_test001ghostpdl-10.04.0rc1ghostpdl-10.04.0rc2_test001ghostpdl-10.04.0rjw-test3ghostpdl-10.05.0-test-base-001ghostpdl-10.05.0rc1ghostpdl-10.05.0ghostpdl-10.05.1rc1_test001ghostpdl-10.05.1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2022-73 is a vulnerability with no CVSS score yet in ghostscript, published January 22, 2022. No source lists public exploit code. No source names a fixed version.
References
This page doesn't list everything
Left out here: 9 versions. The JSON record has them.