OSV-2023-34
Heap-use-after-free in gc_trace
No score
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55443
Crash type: Heap-use-after-free READ 2
Crash state:
gc_trace
gs_gc_reclaim
ireclaim
What each source reports
OSV No score
Heap-use-after-free in gc_trace
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55443
Crash type: Heap-use-after-free READ 2
Crash state:
gc_trace
gs_gc_reclaim
ireclaim
- Record
OSV-2023-34- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ghostscriptOSS-Fuzz |
Listed versions, plus commit ranges ghostpdl-10.01.0rc1ghostpdl-10.01.0rc2ghostpdl-10.01.0ghostpdl-10.01.1ghostpdl-10.02.0-test-base-001 Show 35 moreShow lessghostpdl-10.01.1-gse-10174rjw-testghostpdl-10.01.2ghostpdl-10.02.0rc1ghostpdl-10.02.0rc2ghostpdl-10.02.0ghostpdl-10.02.1ghostpdl-10.03.0rc1_testghostpdl-10.03.0rc1_test002ghostpdl-10.03.0rc1_test003ghostpdl-10.03.0rc1ghostpdl-10.03.0_test001ghostpdl-10.03.0_test002robin_test_refghostpdl-10.03.0ghostpdl-10.03.1ghostpdl-10.04.0rc1_test001ghostpdl-10.04.0rc1ghostpdl-10.04.0rc2_test001ghostpdl-10.04.0rjw-test3ghostpdl-10.05.0-test-base-001ghostpdl-10.05.0rc1ghostpdl-10.05.0ghostpdl-10.05.1rc1_test001ghostpdl-10.05.1ghostpdl-10.05.1rc1_test002ken-testghostpdl-10.06.0rc1ghostpdl-10.06.0rc2ghostpdl-10.06.0ghostpdl-10.07.0rc1_test001ghostpdl-10.07.0rc1_test002ghostpdl-10.07.0rc1_test003ghostpdl-10.07.0rc1_test004 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2023-34 is a vulnerability with no CVSS score yet in ghostscript, published January 29, 2023. No source lists public exploit code. No source names a fixed version.