{"id":"CVE-2025-27831","aliases":["ALPINE-CVE-2025-27831","BELL-CVE-2025-27831","CLSA-2026-1775120182","CLSA-2026-1775210556","DEBIAN-CVE-2025-27831","DLA-4118-1","DSA-5888-1","EUVD-2025-8087","GHSA-x74r-f89v-3jw9","MGASA-2025-0098","OESA-2025-1398","OESA-2025-1399","OESA-2025-1400","OESA-2025-1401","SUSE-SU-2025:1118-1","SUSE-SU-2025:1127-1","UBUNTU-CVE-2025-27831","USN-7378-1","openSUSE-SU-2025:14953-1"],"status":"published","title":"An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has...","description":"An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00604,"percentile":0.49421,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2025-03-15T01:40:42Z","modified":"2026-11-03T06:32:51Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"ghostscript","fixed_in":["10.05.0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"ghostscript","fixed_in":["10.05.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"ghostscript","fixed_in":["10.05.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"ghostscript","fixed_in":["10.05.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"ghostscript","fixed_in":["10.05.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"ghostscript","fixed_in":["10.05.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"ghostscript","fixed_in":["10.05.0-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"ghostscript","fixed_in":["10.01.2-r4"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"ghostscript","fixed_in":["10.05.0-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"ghostscript","fixed_in":["10.0.0~dfsg-11+deb12u7"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ghostscript","fixed_in":["10.05.0~dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ghostscript","fixed_in":["10.05.0~dfsg-1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"ghostscript","fixed_in":["9.55.0-20.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"ghostscript","fixed_in":["9.55.0-20.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"ghostscript","fixed_in":["9.56.1-16.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"ghostscript","fixed_in":["9.56.1-16.oe2403sp1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"ghostscript","fixed_in":["9.55.0~dfsg1-0ubuntu5.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"ghostscript","fixed_in":["10.02.1~dfsg1-0ubuntu7.5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.05.0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.05.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.05.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.05.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.05.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.05.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.05.0-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.0-r0"},{"fixed":"10.01.2-r4"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.0-r0"},{"fixed":"10.05.0-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els10"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els10"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els10"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-tools-dvipdf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els10"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-tools-fonts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els10"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-tools-printing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els10"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els10"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libgs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els10"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libgs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els10"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-tools-dvipdf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-tools-fonts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-tools-printing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libgs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libgs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.0~dfsg-11+deb12u7"}]}],"versions":["10.0.0~dfsg-11","10.0.0~dfsg-11+deb12u1","10.0.0~dfsg-11+deb12u2","10.0.0~dfsg-11+deb12u3","10.0.0~dfsg-11+deb12u4","10.0.0~dfsg-11+deb12u5","10.0.0~dfsg-11+deb12u6"]},{"source":"osv","ecosystem":"Debian:13","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.05.0~dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.05.0~dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.53.3~dfsg-7+deb11u10"}]}],"versions":["9.53.3~dfsg-7","9.53.3~dfsg-7+deb11u1","9.53.3~dfsg-7+deb11u2","9.53.3~dfsg-7+deb11u3","9.53.3~dfsg-7+deb11u4","9.53.3~dfsg-7+deb11u5","9.53.3~dfsg-7+deb11u6","9.53.3~dfsg-7+deb11u7","9.53.3~dfsg-7+deb11u8","9.53.3~dfsg-7+deb11u9"],"bundled":5},{"source":"osv","ecosystem":"Debian:12","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.0~dfsg-11+deb12u7"}]}],"versions":["10.0.0~dfsg-11","10.0.0~dfsg-11+deb12u1","10.0.0~dfsg-11+deb12u2","10.0.0~dfsg-11+deb12u3","10.0.0~dfsg-11+deb12u4","10.0.0~dfsg-11+deb12u5","10.0.0~dfsg-11+deb12u6"],"bundled":7},{"source":"osv","ecosystem":"Mageia:9","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.05.0-1.mga9"}]}],"bundled":8},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.55.0-20.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.55.0-20.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.56.1-16.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.56.1-16.oe2403sp1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.89.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.89.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-150000.203.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-150000.203.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-150000.203.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-150000.203.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-150000.203.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-150000.203.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-150000.203.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-150000.203.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-150000.203.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-150000.203.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-150000.203.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-150000.203.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-150000.203.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-150000.203.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-150000.203.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-150000.203.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.55.0~dfsg1-0ubuntu5.11"}]}],"versions":["9.54.0~dfsg1-0ubuntu2","9.55.0~dfsg1-0ubuntu4","9.55.0~dfsg1-0ubuntu5","9.55.0~dfsg1-0ubuntu5.1","9.55.0~dfsg1-0ubuntu5.2","9.55.0~dfsg1-0ubuntu5.3","9.55.0~dfsg1-0ubuntu5.4","9.55.0~dfsg1-0ubuntu5.5","9.55.0~dfsg1-0ubuntu5.6","9.55.0~dfsg1-0ubuntu5.7","9.55.0~dfsg1-0ubuntu5.9","9.55.0~dfsg1-0ubuntu5.10"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.02.1~dfsg1-0ubuntu7.5"}]}],"versions":["10.01.2~dfsg1-0ubuntu2","10.01.2~dfsg1-0ubuntu2.1","10.02.1~dfsg1-0ubuntu1","10.02.1~dfsg1-0ubuntu2","10.02.1~dfsg1-0ubuntu5","10.02.1~dfsg1-0ubuntu6","10.02.1~dfsg1-0ubuntu7","10.02.1~dfsg1-0ubuntu7.1","10.02.1~dfsg1-0ubuntu7.3","10.02.1~dfsg1-0ubuntu7.4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.50~dfsg-5ubuntu4.15"}]}],"versions":["9.27~dfsg+0-0ubuntu3","9.27~dfsg+0-0ubuntu4","9.50~dfsg-5ubuntu1","9.50~dfsg-5ubuntu2","9.50~dfsg-5ubuntu3","9.50~dfsg-5ubuntu4","9.50~dfsg-5ubuntu4.1","9.50~dfsg-5ubuntu4.2","9.50~dfsg-5ubuntu4.3","9.50~dfsg-5ubuntu4.4","9.50~dfsg-5ubuntu4.5","9.50~dfsg-5ubuntu4.6","9.50~dfsg-5ubuntu4.7","9.50~dfsg-5ubuntu4.8","9.50~dfsg-5ubuntu4.9","9.50~dfsg-5ubuntu4.10","9.50~dfsg-5ubuntu4.11","9.50~dfsg-5ubuntu4.12","9.50~dfsg-5ubuntu4.13","9.50~dfsg-5ubuntu4.14"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.55.0~dfsg1-0ubuntu5.11"}]}],"versions":["9.54.0~dfsg1-0ubuntu2","9.55.0~dfsg1-0ubuntu4","9.55.0~dfsg1-0ubuntu5","9.55.0~dfsg1-0ubuntu5.1","9.55.0~dfsg1-0ubuntu5.2","9.55.0~dfsg1-0ubuntu5.3","9.55.0~dfsg1-0ubuntu5.4","9.55.0~dfsg1-0ubuntu5.5","9.55.0~dfsg1-0ubuntu5.6","9.55.0~dfsg1-0ubuntu5.7","9.55.0~dfsg1-0ubuntu5.9","9.55.0~dfsg1-0ubuntu5.10"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.02.1~dfsg1-0ubuntu7.5"}]}],"versions":["10.01.2~dfsg1-0ubuntu2","10.01.2~dfsg1-0ubuntu2.1","10.02.1~dfsg1-0ubuntu1","10.02.1~dfsg1-0ubuntu2","10.02.1~dfsg1-0ubuntu5","10.02.1~dfsg1-0ubuntu6","10.02.1~dfsg1-0ubuntu7","10.02.1~dfsg1-0ubuntu7.1","10.02.1~dfsg1-0ubuntu7.3","10.02.1~dfsg1-0ubuntu7.4"],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.05.0-1.1"}]}],"bundled":8}],"products":[{"vendor":"artifex","product":"ghostscript"}],"references":[{"url":"https://bugs.ghostscript.com/show_bug.cgi?id=708132","tags":["Issue Tracking","Patch","fix"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/04/msg00014.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27831","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-x74r-f89v-3jw9"},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-27831","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-27831","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1775120182.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1775210556.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-27831","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0098.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34088","tags":["report"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1398","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1399","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1400","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1401","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251118-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1240075","tags":["report"]},{"url":"https://bugzilla.suse.com/1240077","tags":["report"]},{"url":"https://bugzilla.suse.com/1240080","tags":["report"]},{"url":"https://bugzilla.suse.com/1240081","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27836","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251127-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-27831","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-27831","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7378-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-27830","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-27832","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-27833","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-27834","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-27835","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-27836","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GBB65P3KU5MBN7SLCFPCDEZ3Y2ACRGXP/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-27837","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2025-27831","description":"An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.","status":"published","published":"2025-03-25T00:00:00Z","modified":"2025-11-03T19:46:32.988Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:32:42.751171Z"}],"euvd":[{"id":"EUVD-2025-8087","description":"An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.","status":"published","published":"2025-03-25T00:00:00Z","modified":"2025-11-03T19:46:32Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:49:33.269212Z"}],"ghsa":[{"id":"GHSA-x74r-f89v-3jw9","title":"An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has...","description":"An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.","status":"published","published":"2025-03-25T21:31:34Z","modified":"2025-11-03T21:33:14Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T15:04:22.088739Z"}],"nvd":[{"id":"CVE-2025-27831","description":"An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.","status":"published","published":"2025-03-25T21:15:42.467Z","modified":"2026-06-17T09:04:18.193Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:10:55.858901Z"}],"osv":[{"id":"ALPINE-CVE-2025-27831","description":"An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.","status":"published","published":"2025-03-25T21:15:42.467Z","modified":"2026-11-03T06:32:51.174178572Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T07:16:46.202932Z"},{"id":"BELL-CVE-2025-27831","status":"published","published":"2025-03-20T05:58:40.219607Z","modified":"2026-01-26T09:39:06.741784Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:21.741325Z"},{"id":"CVE-2025-27831","description":"An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.","status":"published","published":"2025-03-25T21:15:42.467Z","modified":"2026-04-16T04:35:19.874044995Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:47.708311Z"},{"id":"DEBIAN-CVE-2025-27831","description":"An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.","status":"published","published":"2025-03-25T21:15:42.467Z","modified":"2026-09-01T20:05:45.333892996Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:45.870237Z"},{"id":"OESA-2025-1398","title":"ghostscript security update","description":"Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.\r\n\r\nSecurity Fix(es):\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.(CVE-2025-27831)","status":"published","published":"2025-04-11T11:08:29Z","modified":"2026-08-18T01:18:17.156097828Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1399","title":"ghostscript security update","description":"Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.\r\n\r\nSecurity Fix(es):\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.(CVE-2025-27831)","status":"published","published":"2025-04-11T11:08:29Z","modified":"2026-08-18T01:18:17.16479877Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1400","title":"ghostscript security update","description":"Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.\r\n\r\nSecurity Fix(es):\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.(CVE-2025-27831)","status":"published","published":"2025-04-11T11:08:29Z","modified":"2026-08-18T01:18:17.139755316Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1401","title":"ghostscript security update","description":"Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.\r\n\r\nSecurity Fix(es):\n\nAn issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.(CVE-2025-27831)","status":"published","published":"2025-04-11T11:08:29Z","modified":"2026-08-18T01:18:17.168040072Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"UBUNTU-CVE-2025-27831","description":"An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.","status":"published","published":"2025-03-25T21:15:00Z","modified":"2026-04-22T15:40:39.017196Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:55:26.330196Z"},{"id":"CLSA-2026-1775120182","title":"ghostscript: Fix of 4 CVEs","description":"- CVE-2025-27830: fix potential buffer overflow with DollarBlend in font\n  serialization\n- CVE-2025-27831: prevent Unicode decoding overrun in txtwrite/docxwrite\n  devices\n- CVE-2025-27835: fix confusion between bytes and shorts in glyph to Unicode\n  conversion\n- CVE-2025-27836: fix potential print buffer overflow in BJ10V device","status":"published","published":"2026-04-02T08:56:26Z","modified":"2026-06-01T00:32:12.144740728Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1775210556","title":"ghostscript: Fix of 4 CVEs","description":"- CVE-2025-27830: fix potential buffer overflow with DollarBlend in font\n  serialization\n- CVE-2025-27831: prevent Unicode decoding overrun in txtwrite/docxwrite\n  devices\n- CVE-2025-27835: fix confusion between bytes and shorts in glyph to Unicode\n  conversion\n- CVE-2025-27836: fix potential print buffer overflow in BJ10V device","status":"published","published":"2026-04-03T10:02:40Z","modified":"2026-06-01T00:32:46.329874743Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"DLA-4118-1","title":"ghostscript - security update","status":"published","published":"2025-04-07T00:00:00Z","modified":"2026-03-09T01:23:17.652733Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-5888-1","title":"ghostscript - security update","status":"published","published":"2025-03-26T00:00:00Z","modified":"2026-03-09T02:11:05.693084Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2025-0098","title":"Updated ghostscript packages fix security vulnerabilities","description":"This release addresses CVEs: CVE-2025-27835, CVE-2025-27832,\nCVE-2025-27831, CVE-2025-27836, CVE-2025-27830, CVE-2025-27833,\nCVE-2025-27837, CVE-2025-27834\nThe 10.05.0 release deprecates the non-standard operator \"selectdevice\",\nall code should now be using the standard \"setpagedevice\" operator.\n\"selectdevice\" will be removed in the 10.06.0 release.\nWe now support production of PDF/X-1a and PDF/X-4a in addition to the\nexisting support for PDF/X-3\n","status":"published","published":"2025-03-15T01:40:42Z","modified":"2026-04-16T04:41:31.477461469Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:14953-1","title":"ghostscript-10.05.0-1.1 on GA media","description":"These are all security issues fixed in the ghostscript-10.05.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-04-02T00:00:00Z","modified":"2026-02-04T02:32:41.576608Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"SUSE-SU-2025:1118-1","title":"Security update for ghostscript","description":"This update for ghostscript fixes the following issues:\n\n  - CVE-2025-27831: Fixed text buffer overflow in DOCXWRITE TXTWRITE device via long characters to devices/vector/doc_common.c (bsc#1240075)\n  - CVE-2025-27832: Fixed compression buffer overflow in NPDL device for contrib/japanese/gdevnpdl.c (bsc#1240077)\n  - CVE-2025-27835: Fixed buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c (bsc#1240080)\n  - CVE-2025-27836: Fixed Print buffer overflow in BJ10V device in contrib/japanese/gdev10v.c (bsc#1240081)\n","status":"published","published":"2025-04-02T14:49:08Z","modified":"2026-02-04T03:45:21.185037Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:1127-1","title":"Security update for ghostscript","description":"This update for ghostscript fixes the following issues:\n\n  - CVE-2025-27831: Fixed text buffer overflow in DOCXWRITE TXTWRITE device via long characters to devices/vector/doc_common.c (bsc#1240075)\n  - CVE-2025-27832: Fixed compression buffer overflow in NPDL device for contrib/japanese/gdevnpdl.c (bsc#1240077)\n  - CVE-2025-27835: Fixed buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c (bsc#1240080)\n  - CVE-2025-27836: Fixed Print buffer overflow in BJ10V device in contrib/japanese/gdev10v.c (bsc#1240081)\n","status":"published","published":"2025-04-03T11:52:58Z","modified":"2026-02-04T04:19:29.550315Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"USN-7378-1","title":"ghostscript vulnerabilities","description":"It was discovered that Ghostscript incorrectly serialized DollarBlend in\ncertain fonts. An attacker could use this issue to cause Ghostscript to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. (CVE-2025-27830)\n\nIt was discovered that Ghostscript incorrectly handled the DOCXWRITE\nTXTWRITE device. An attacker could use this issue to cause Ghostscript to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and\nUbuntu 24.10. (CVE-2025-27831)\n\nIt was discovered that Ghostscript incorrectly handled the NPDL device. An\nattacker could use this issue to cause Ghostscript to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. (CVE-2025-27832)\n\nIt was discovered that Ghostscript incorrectly handled certain long TTF\nfile names. An attacker could use this issue to cause Ghostscript to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. This issue only affected Ubuntu 24.04 LTS and Ubuntu 24.10.\n(CVE-2025-27833)\n\nIt was discovered that Ghostscript incorrectly handled oversized Type 4\nfunctions in certain PDF documents. An attacker could use this issue to\ncause Ghostscript to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu\n24.04 LTS, and Ubuntu 24.10. (CVE-2025-27834)\n\nIt was discovered that Ghostscript incorrectly handled converting certain\nglyphs to Unicode. An attacker could use this issue to cause Ghostscript to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. (CVE-2025-27835)\n\nIt was discovered that Ghostscript incorrectly handled the BJ10V device. An\nattacker could use this issue to cause Ghostscript to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. (CVE-2025-27836)\n","status":"published","published":"2025-03-27T12:00:37Z","modified":"2026-04-22T10:57:00.16137Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}