{"id":"CVE-2025-27830","aliases":["ALPINE-CVE-2025-27830","BELL-CVE-2025-27830","CLSA-2026-1775120182","CLSA-2026-1775210556","CLSA-2026-1791294114","DEBIAN-CVE-2025-27830","DLA-4118-1","DSA-5888-1","EUVD-2025-8092","GHSA-5fxv-x2j7-rmwm","MGASA-2025-0098","OESA-2025-1358","OESA-2025-1359","OESA-2025-1360","OESA-2025-1361","OESA-2025-1362","UBUNTU-CVE-2025-27830","USN-7378-1","openSUSE-SU-2025:14953-1"],"status":"published","title":"An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during...","description":"An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.0031,"percentile":0.24113,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2025-03-15T01:40:42Z","modified":"2026-11-03T06:33:00Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"ghostscript","fixed_in":["10.05.0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"ghostscript","fixed_in":["10.05.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"ghostscript","fixed_in":["10.05.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"ghostscript","fixed_in":["10.05.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"ghostscript","fixed_in":["10.05.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"ghostscript","fixed_in":["10.05.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"ghostscript","fixed_in":["10.05.0-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"ghostscript","fixed_in":["10.01.2-r4"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"ghostscript","fixed_in":["10.05.0-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"ghostscript","fixed_in":["10.0.0~dfsg-11+deb12u7"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ghostscript","fixed_in":["10.05.0~dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ghostscript","fixed_in":["10.05.0~dfsg-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"ghostscript","fixed_in":["9.50~dfsg-5ubuntu4.15"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"ghostscript","fixed_in":["9.55.0~dfsg1-0ubuntu5.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"ghostscript","fixed_in":["10.02.1~dfsg1-0ubuntu7.5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.05.0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.05.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.05.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.05.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.05.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.05.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.05.0-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.0-r0"},{"fixed":"10.01.2-r4"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.0-r0"},{"fixed":"10.05.0-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els10"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els10"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els10"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-tools-dvipdf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els10"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-tools-fonts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els10"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-tools-printing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els10"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els10"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libgs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els10"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libgs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els10"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-tools-dvipdf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-tools-fonts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-tools-printing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libgs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libgs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els7"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els7"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els7"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-tools-dvipdf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els7"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-tools-fonts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els7"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-tools-printing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els7"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els7"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libgs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els7"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libgs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els7"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.0~dfsg-11+deb12u7"}]}],"versions":["10.0.0~dfsg-11","10.0.0~dfsg-11+deb12u1","10.0.0~dfsg-11+deb12u2","10.0.0~dfsg-11+deb12u3","10.0.0~dfsg-11+deb12u4","10.0.0~dfsg-11+deb12u5","10.0.0~dfsg-11+deb12u6"]},{"source":"osv","ecosystem":"Debian:13","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.05.0~dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.05.0~dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.53.3~dfsg-7+deb11u10"}]}],"versions":["9.53.3~dfsg-7","9.53.3~dfsg-7+deb11u1","9.53.3~dfsg-7+deb11u2","9.53.3~dfsg-7+deb11u3","9.53.3~dfsg-7+deb11u4","9.53.3~dfsg-7+deb11u5","9.53.3~dfsg-7+deb11u6","9.53.3~dfsg-7+deb11u7","9.53.3~dfsg-7+deb11u8","9.53.3~dfsg-7+deb11u9"],"bundled":5},{"source":"osv","ecosystem":"Debian:12","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.0~dfsg-11+deb12u7"}]}],"versions":["10.0.0~dfsg-11","10.0.0~dfsg-11+deb12u1","10.0.0~dfsg-11+deb12u2","10.0.0~dfsg-11+deb12u3","10.0.0~dfsg-11+deb12u4","10.0.0~dfsg-11+deb12u5","10.0.0~dfsg-11+deb12u6"],"bundled":7},{"source":"osv","ecosystem":"Mageia:9","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.05.0-1.mga9"}]}],"bundled":8},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.55.0-19.oe2203sp4"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.56.1-15.oe2403"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.56.1-15.oe2403sp1"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-21.oe2003sp4"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.55.0-18.oe2203sp3"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.50~dfsg-5ubuntu4.15"}]}],"versions":["9.27~dfsg+0-0ubuntu3","9.27~dfsg+0-0ubuntu4","9.50~dfsg-5ubuntu1","9.50~dfsg-5ubuntu2","9.50~dfsg-5ubuntu3","9.50~dfsg-5ubuntu4","9.50~dfsg-5ubuntu4.1","9.50~dfsg-5ubuntu4.2","9.50~dfsg-5ubuntu4.3","9.50~dfsg-5ubuntu4.4","9.50~dfsg-5ubuntu4.5","9.50~dfsg-5ubuntu4.6","9.50~dfsg-5ubuntu4.7","9.50~dfsg-5ubuntu4.8","9.50~dfsg-5ubuntu4.9","9.50~dfsg-5ubuntu4.10","9.50~dfsg-5ubuntu4.11","9.50~dfsg-5ubuntu4.12","9.50~dfsg-5ubuntu4.13","9.50~dfsg-5ubuntu4.14"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.55.0~dfsg1-0ubuntu5.11"}]}],"versions":["9.54.0~dfsg1-0ubuntu2","9.55.0~dfsg1-0ubuntu4","9.55.0~dfsg1-0ubuntu5","9.55.0~dfsg1-0ubuntu5.1","9.55.0~dfsg1-0ubuntu5.2","9.55.0~dfsg1-0ubuntu5.3","9.55.0~dfsg1-0ubuntu5.4","9.55.0~dfsg1-0ubuntu5.5","9.55.0~dfsg1-0ubuntu5.6","9.55.0~dfsg1-0ubuntu5.7","9.55.0~dfsg1-0ubuntu5.9","9.55.0~dfsg1-0ubuntu5.10"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.02.1~dfsg1-0ubuntu7.5"}]}],"versions":["10.01.2~dfsg1-0ubuntu2","10.01.2~dfsg1-0ubuntu2.1","10.02.1~dfsg1-0ubuntu1","10.02.1~dfsg1-0ubuntu2","10.02.1~dfsg1-0ubuntu5","10.02.1~dfsg1-0ubuntu6","10.02.1~dfsg1-0ubuntu7","10.02.1~dfsg1-0ubuntu7.1","10.02.1~dfsg1-0ubuntu7.3","10.02.1~dfsg1-0ubuntu7.4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.50~dfsg-5ubuntu4.15"}]}],"versions":["9.27~dfsg+0-0ubuntu3","9.27~dfsg+0-0ubuntu4","9.50~dfsg-5ubuntu1","9.50~dfsg-5ubuntu2","9.50~dfsg-5ubuntu3","9.50~dfsg-5ubuntu4","9.50~dfsg-5ubuntu4.1","9.50~dfsg-5ubuntu4.2","9.50~dfsg-5ubuntu4.3","9.50~dfsg-5ubuntu4.4","9.50~dfsg-5ubuntu4.5","9.50~dfsg-5ubuntu4.6","9.50~dfsg-5ubuntu4.7","9.50~dfsg-5ubuntu4.8","9.50~dfsg-5ubuntu4.9","9.50~dfsg-5ubuntu4.10","9.50~dfsg-5ubuntu4.11","9.50~dfsg-5ubuntu4.12","9.50~dfsg-5ubuntu4.13","9.50~dfsg-5ubuntu4.14"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.55.0~dfsg1-0ubuntu5.11"}]}],"versions":["9.54.0~dfsg1-0ubuntu2","9.55.0~dfsg1-0ubuntu4","9.55.0~dfsg1-0ubuntu5","9.55.0~dfsg1-0ubuntu5.1","9.55.0~dfsg1-0ubuntu5.2","9.55.0~dfsg1-0ubuntu5.3","9.55.0~dfsg1-0ubuntu5.4","9.55.0~dfsg1-0ubuntu5.5","9.55.0~dfsg1-0ubuntu5.6","9.55.0~dfsg1-0ubuntu5.7","9.55.0~dfsg1-0ubuntu5.9","9.55.0~dfsg1-0ubuntu5.10"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.02.1~dfsg1-0ubuntu7.5"}]}],"versions":["10.01.2~dfsg1-0ubuntu2","10.01.2~dfsg1-0ubuntu2.1","10.02.1~dfsg1-0ubuntu1","10.02.1~dfsg1-0ubuntu2","10.02.1~dfsg1-0ubuntu5","10.02.1~dfsg1-0ubuntu6","10.02.1~dfsg1-0ubuntu7","10.02.1~dfsg1-0ubuntu7.1","10.02.1~dfsg1-0ubuntu7.3","10.02.1~dfsg1-0ubuntu7.4"],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.05.0-1.1"}]}],"bundled":8}],"products":[{"vendor":"artifex","product":"ghostscript"}],"references":[{"url":"https://bugs.ghostscript.com/show_bug.cgi?id=708241","tags":["Issue Tracking","Patch","fix"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/04/msg00014.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27830","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-5fxv-x2j7-rmwm"},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-27830","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-27830","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1775120182.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1775210556.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1791294114.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103226","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-39919","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-27830","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0098.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34088","tags":["report"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1358","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27832","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27834","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27835","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27836","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1359","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27833","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1360","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1361","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1362","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-27830","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-27830","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7378-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-27831","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-27832","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-27833","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-27834","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-27835","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-27836","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GBB65P3KU5MBN7SLCFPCDEZ3Y2ACRGXP/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27837","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2025-27830","description":"An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c.","status":"published","published":"2025-03-25T00:00:00Z","modified":"2025-11-03T19:46:31.608Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:32:42.411662Z"}],"euvd":[{"id":"EUVD-2025-8092","description":"An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c.","status":"published","published":"2025-03-25T00:00:00Z","modified":"2025-11-03T19:46:31Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:33.269212Z"}],"ghsa":[{"id":"GHSA-5fxv-x2j7-rmwm","title":"An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during...","description":"An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c.","status":"published","published":"2025-03-25T21:31:34Z","modified":"2025-11-03T21:33:14Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T15:04:22.088739Z"}],"nvd":[{"id":"CVE-2025-27830","description":"An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c.","status":"published","published":"2025-03-25T21:15:42.353Z","modified":"2026-06-17T09:04:18.037Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:10:55.858901Z"}],"osv":[{"id":"ALPINE-CVE-2025-27830","description":"An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c.","status":"published","published":"2025-03-25T21:15:42.353Z","modified":"2026-11-03T06:33:00.374724517Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:16:09.603409Z"},{"id":"BELL-CVE-2025-27830","status":"published","published":"2025-03-20T05:58:40.155745Z","modified":"2026-01-26T09:39:06.829994Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:21.741325Z"},{"id":"CVE-2025-27830","description":"An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c.","status":"published","published":"2025-03-25T21:15:42.353Z","modified":"2026-04-16T04:40:09.824009449Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:47.708311Z"},{"id":"DEBIAN-CVE-2025-27830","description":"An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c.","status":"published","published":"2025-03-25T21:15:42.353Z","modified":"2026-09-01T20:05:45.334832733Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:45.870237Z"},{"id":"OESA-2025-1358","title":"ghostscript security update","description":"Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.\r\n\r\nSecurity Fix(es):\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c.(CVE-2025-27830)\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c.(CVE-2025-27832)\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs via an oversized Type 4 function in a PDF document to pdf/pdf_func.c.(CVE-2025-27834)\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c.(CVE-2025-27835)\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c.(CVE-2025-27836)","status":"published","published":"2025-04-03T11:08:27Z","modified":"2026-08-18T01:17:50.51817862Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1359","title":"ghostscript security update","description":"Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.\r\n\r\nSecurity Fix(es):\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c.(CVE-2025-27830)\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c.(CVE-2025-27832)\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs for a long TTF font name to pdf/pdf_fmap.c.(CVE-2025-27833)\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs via an oversized Type 4 function in a PDF document to pdf/pdf_func.c.(CVE-2025-27834)\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c.(CVE-2025-27835)\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c.(CVE-2025-27836)","status":"published","published":"2025-04-03T11:08:27Z","modified":"2026-08-18T01:17:50.603721636Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1360","title":"ghostscript security update","description":"Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.\r\n\r\nSecurity Fix(es):\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c.(CVE-2025-27830)\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c.(CVE-2025-27832)\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs for a long TTF font name to pdf/pdf_fmap.c.(CVE-2025-27833)\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs via an oversized Type 4 function in a PDF document to pdf/pdf_func.c.(CVE-2025-27834)\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c.(CVE-2025-27835)\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c.(CVE-2025-27836)","status":"published","published":"2025-04-03T11:08:27Z","modified":"2026-08-18T01:17:50.77458842Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1361","title":"ghostscript security update","description":"Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.\r\n\r\nSecurity Fix(es):\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c.(CVE-2025-27830)\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c.(CVE-2025-27832)\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c.(CVE-2025-27835)\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c.(CVE-2025-27836)","status":"published","published":"2025-04-03T11:08:27Z","modified":"2026-08-18T01:17:50.98632368Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1362","title":"ghostscript security update","description":"Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.\r\n\r\nSecurity Fix(es):\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c.(CVE-2025-27830)\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c.(CVE-2025-27832)\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs via an oversized Type 4 function in a PDF document to pdf/pdf_func.c.(CVE-2025-27834)\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c.(CVE-2025-27835)\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c.(CVE-2025-27836)","status":"published","published":"2025-04-03T11:08:27Z","modified":"2026-08-18T01:17:50.99809133Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"UBUNTU-CVE-2025-27830","description":"An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c.","status":"published","published":"2025-03-25T21:15:00Z","modified":"2026-04-22T15:40:30.510686Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:26.330196Z"},{"id":"CLSA-2026-1775120182","title":"ghostscript: Fix of 4 CVEs","description":"- CVE-2025-27830: fix potential buffer overflow with DollarBlend in font\n  serialization\n- CVE-2025-27831: prevent Unicode decoding overrun in txtwrite/docxwrite\n  devices\n- CVE-2025-27835: fix confusion between bytes and shorts in glyph to Unicode\n  conversion\n- CVE-2025-27836: fix potential print buffer overflow in BJ10V device","status":"published","published":"2026-04-02T08:56:26Z","modified":"2026-06-01T00:32:12.144740728Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775210556","title":"ghostscript: Fix of 4 CVEs","description":"- CVE-2025-27830: fix potential buffer overflow with DollarBlend in font\n  serialization\n- CVE-2025-27831: prevent Unicode decoding overrun in txtwrite/docxwrite\n  devices\n- CVE-2025-27835: fix confusion between bytes and shorts in glyph to Unicode\n  conversion\n- CVE-2025-27836: fix potential print buffer overflow in BJ10V device","status":"published","published":"2026-04-03T10:02:40Z","modified":"2026-06-01T00:32:46.329874743Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1791294114","title":"ghostscript: Fix of 2 CVEs","description":"- CVE-2026-39919: fix heap buffer overflow in the JPEG 2000 output adapter when\n  components are subsampled below 8 bits per sample\n- CVE-2026-103226: bound the control stack in the Type 1 to Type 2 font\n  conversion used by pdfwrite\n- CVE-2025-27830: count every $Blend procedure entry in the length and bound\n  the formatting of its numbers so the serialized procedure cannot overflow\n  its buffer (upstream Bug 706923 and gs_snprintf)","status":"published","published":"2026-10-06T13:42:05Z","modified":"2026-10-26T09:43:45.632876618Z","updated_at":"2026-11-02T15:43:49.016976Z"},{"id":"DLA-4118-1","title":"ghostscript - security update","status":"published","published":"2025-04-07T00:00:00Z","modified":"2026-03-09T01:23:17.652733Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-5888-1","title":"ghostscript - security update","status":"published","published":"2025-03-26T00:00:00Z","modified":"2026-03-09T02:11:05.693084Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2025-0098","title":"Updated ghostscript packages fix security vulnerabilities","description":"This release addresses CVEs: CVE-2025-27835, CVE-2025-27832,\nCVE-2025-27831, CVE-2025-27836, CVE-2025-27830, CVE-2025-27833,\nCVE-2025-27837, CVE-2025-27834\nThe 10.05.0 release deprecates the non-standard operator \"selectdevice\",\nall code should now be using the standard \"setpagedevice\" operator.\n\"selectdevice\" will be removed in the 10.06.0 release.\nWe now support production of PDF/X-1a and PDF/X-4a in addition to the\nexisting support for PDF/X-3\n","status":"published","published":"2025-03-15T01:40:42Z","modified":"2026-04-16T04:41:31.477461469Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:14953-1","title":"ghostscript-10.05.0-1.1 on GA media","description":"These are all security issues fixed in the ghostscript-10.05.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-04-02T00:00:00Z","modified":"2026-02-04T02:32:41.576608Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"USN-7378-1","title":"ghostscript vulnerabilities","description":"It was discovered that Ghostscript incorrectly serialized DollarBlend in\ncertain fonts. An attacker could use this issue to cause Ghostscript to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. (CVE-2025-27830)\n\nIt was discovered that Ghostscript incorrectly handled the DOCXWRITE\nTXTWRITE device. An attacker could use this issue to cause Ghostscript to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and\nUbuntu 24.10. (CVE-2025-27831)\n\nIt was discovered that Ghostscript incorrectly handled the NPDL device. An\nattacker could use this issue to cause Ghostscript to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. (CVE-2025-27832)\n\nIt was discovered that Ghostscript incorrectly handled certain long TTF\nfile names. An attacker could use this issue to cause Ghostscript to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. This issue only affected Ubuntu 24.04 LTS and Ubuntu 24.10.\n(CVE-2025-27833)\n\nIt was discovered that Ghostscript incorrectly handled oversized Type 4\nfunctions in certain PDF documents. An attacker could use this issue to\ncause Ghostscript to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu\n24.04 LTS, and Ubuntu 24.10. (CVE-2025-27834)\n\nIt was discovered that Ghostscript incorrectly handled converting certain\nglyphs to Unicode. An attacker could use this issue to cause Ghostscript to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. (CVE-2025-27835)\n\nIt was discovered that Ghostscript incorrectly handled the BJ10V device. An\nattacker could use this issue to cause Ghostscript to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. (CVE-2025-27836)\n","status":"published","published":"2025-03-27T12:00:37Z","modified":"2026-04-22T10:57:00.16137Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}