{"id":"CVE-2025-48708","aliases":["CLSA-2026-1778749215","CLSA-2026-1778897873","DEBIAN-CVE-2025-48708","EUVD-2025-28243","GHSA-7q9j-33vm-8375","MGASA-2025-0170","OESA-2025-1580","ROOT-OS-DEBIAN-12-CVE-2025-48708","SUSE-SU-2025:03460-1","SUSE-SU-2025:03461-1","SUSE-SU-2026:21363-1","UBUNTU-CVE-2025-48708","USN-7623-1","openSUSE-SU-2025:15413-1","openSUSE-SU-2026:20592-1"],"status":"published","title":"gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript through 10.05.0 lacks...","description":"gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF document includes its password in cleartext.","severity":{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00323,"percentile":0.25567,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-212"],"published":"2025-05-23T00:00:00Z","modified":"2026-09-01T20:05:53Z","exploits":[{"source":"pocgithub","id":"B1tBreaker/CVE-2025-48708","title":"B1tBreaker/CVE-2025-48708","date":"2025-05-25","url":"https://github.com/B1tBreaker/CVE-2025-48708"}],"fixes":[{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript","fixed_in":["9.54.0-19.el9_6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-doc","fixed_in":["9.54.0-19.el9_6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-gtk","fixed_in":["9.54.0-19.el9_6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-tools-dvipdf","fixed_in":["9.54.0-19.el9_6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-tools-fonts","fixed_in":["9.54.0-19.el9_6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-tools-printing","fixed_in":["9.54.0-19.el9_6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-x11","fixed_in":["9.54.0-19.el9_6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libgs","fixed_in":["9.54.0-19.el9_6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libgs-devel","fixed_in":["9.54.0-19.el9_6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ghostscript","fixed_in":["10.05.1~dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ghostscript","fixed_in":["10.05.1~dfsg-1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"ghostscript","fixed_in":["10.05.1-1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"ghostscript","fixed_in":["9.56.1-17.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"ghostscript","fixed_in":["9.52-24.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"ghostscript","fixed_in":["9.55.0-21.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"ghostscript","fixed_in":["9.55.0-21.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"ghostscript","fixed_in":["9.56.1-17.oe2403"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"ghostscript","fixed_in":["10.0.0~dfsg-11+deb12u8.aikido.6"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-ghostscript","fixed_in":["10.0.0~dfsg-11+deb12u8.aikido.6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"ghostscript","fixed_in":["9.52-23.92.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"ghostscript","fixed_in":["9.52-150000.206.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"ghostscript","fixed_in":["9.52-150000.206.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"ghostscript","fixed_in":["9.52-150000.206.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"ghostscript","fixed_in":["9.50~dfsg-5ubuntu4.15+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"ghostscript","fixed_in":["9.55.0~dfsg1-0ubuntu5.12"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"ghostscript","fixed_in":["10.02.1~dfsg1-0ubuntu7.7"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-tools-dvipdf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-tools-fonts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-tools-printing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libgs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libgs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-tools-dvipdf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-tools-fonts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-tools-printing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"ghostscript-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libgs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libgs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-19.el9_6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["10.0.0~dfsg-11","10.0.0~dfsg-11+deb12u1","10.0.0~dfsg-11+deb12u2","10.0.0~dfsg-11+deb12u3","10.0.0~dfsg-11+deb12u4","10.0.0~dfsg-11+deb12u5","10.0.0~dfsg-11+deb12u6","10.0.0~dfsg-11+deb12u7","10.0.0~dfsg-11+deb12u8","10.01.2~dfsg-1","10.02.0~dfsg-1","10.02.0~dfsg-2","10.02.1~dfsg-1","10.02.1~dfsg-2","10.02.1~dfsg-3","10.03.0~dfsg-1","10.03.1~dfsg-1","10.03.1~dfsg-2","10.03.1~dfsg~git20240518-1","10.04.0~dfsg-1","10.04.0~dfsg-2","10.05.0~dfsg-1","10.05.1~dfsg-1","10.05.1~dfsg-2","10.05.1~dfsg-3","10.06.0~dfsg-1","10.06.0~dfsg-2","10.06.0~dfsg-3","10.07.0~dfsg-1","10.07.0~dfsg-2","10.07.1~dfsg-1"]},{"source":"osv","ecosystem":"Debian:13","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.05.1~dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.05.1~dfsg-1"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.05.1-1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.56.1-17.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-24.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.55.0-21.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.55.0-21.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.56.1-17.oe2403"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.0~dfsg-11+deb12u8.aikido.6"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0.0~dfsg-11+deb12u8.aikido.6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-23.92.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-150000.206.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-150000.206.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.52-150000.206.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.50~dfsg-5ubuntu4.15+esm1"}]}],"versions":["9.27~dfsg+0-0ubuntu3","9.27~dfsg+0-0ubuntu4","9.50~dfsg-5ubuntu1","9.50~dfsg-5ubuntu2","9.50~dfsg-5ubuntu3","9.50~dfsg-5ubuntu4","9.50~dfsg-5ubuntu4.1","9.50~dfsg-5ubuntu4.2","9.50~dfsg-5ubuntu4.3","9.50~dfsg-5ubuntu4.4","9.50~dfsg-5ubuntu4.5","9.50~dfsg-5ubuntu4.6","9.50~dfsg-5ubuntu4.7","9.50~dfsg-5ubuntu4.8","9.50~dfsg-5ubuntu4.9","9.50~dfsg-5ubuntu4.10","9.50~dfsg-5ubuntu4.11","9.50~dfsg-5ubuntu4.12","9.50~dfsg-5ubuntu4.13","9.50~dfsg-5ubuntu4.14","9.50~dfsg-5ubuntu4.15"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.55.0~dfsg1-0ubuntu5.12"}]}],"versions":["9.54.0~dfsg1-0ubuntu2","9.55.0~dfsg1-0ubuntu4","9.55.0~dfsg1-0ubuntu5","9.55.0~dfsg1-0ubuntu5.1","9.55.0~dfsg1-0ubuntu5.2","9.55.0~dfsg1-0ubuntu5.3","9.55.0~dfsg1-0ubuntu5.4","9.55.0~dfsg1-0ubuntu5.5","9.55.0~dfsg1-0ubuntu5.6","9.55.0~dfsg1-0ubuntu5.7","9.55.0~dfsg1-0ubuntu5.9","9.55.0~dfsg1-0ubuntu5.10","9.55.0~dfsg1-0ubuntu5.11"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.02.1~dfsg1-0ubuntu7.7"}]}],"versions":["10.01.2~dfsg1-0ubuntu2","10.01.2~dfsg1-0ubuntu2.1","10.02.1~dfsg1-0ubuntu1","10.02.1~dfsg1-0ubuntu2","10.02.1~dfsg1-0ubuntu5","10.02.1~dfsg1-0ubuntu6","10.02.1~dfsg1-0ubuntu7","10.02.1~dfsg1-0ubuntu7.1","10.02.1~dfsg1-0ubuntu7.3","10.02.1~dfsg1-0ubuntu7.4","10.02.1~dfsg1-0ubuntu7.5","10.02.1~dfsg1-0ubuntu7.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26~dfsg+0-0ubuntu0.16.04.14+esm9"}]}],"versions":["9.16~dfsg~0-0ubuntu3","9.16~dfsg~0-0ubuntu4","9.18~dfsg~0-0ubuntu1","9.18~dfsg~0-0ubuntu2","9.18~dfsg~0-0ubuntu2.2","9.18~dfsg~0-0ubuntu2.3","9.18~dfsg~0-0ubuntu2.4","9.18~dfsg~0-0ubuntu2.6","9.18~dfsg~0-0ubuntu2.7","9.18~dfsg~0-0ubuntu2.8","9.18~dfsg~0-0ubuntu2.9","9.25~dfsg+1-0ubuntu0.16.04.1","9.25~dfsg+1-0ubuntu0.16.04.2","9.25~dfsg+1-0ubuntu0.16.04.3","9.26~dfsg+0-0ubuntu0.16.04.1","9.26~dfsg+0-0ubuntu0.16.04.3","9.26~dfsg+0-0ubuntu0.16.04.4","9.26~dfsg+0-0ubuntu0.16.04.5","9.26~dfsg+0-0ubuntu0.16.04.6","9.26~dfsg+0-0ubuntu0.16.04.7","9.26~dfsg+0-0ubuntu0.16.04.8","9.26~dfsg+0-0ubuntu0.16.04.9","9.26~dfsg+0-0ubuntu0.16.04.10","9.26~dfsg+0-0ubuntu0.16.04.11","9.26~dfsg+0-0ubuntu0.16.04.12","9.26~dfsg+0-0ubuntu0.16.04.13","9.26~dfsg+0-0ubuntu0.16.04.14","9.26~dfsg+0-0ubuntu0.16.04.14+esm1","9.26~dfsg+0-0ubuntu0.16.04.14+esm2","9.26~dfsg+0-0ubuntu0.16.04.14+esm3","9.26~dfsg+0-0ubuntu0.16.04.14+esm4","9.26~dfsg+0-0ubuntu0.16.04.14+esm5","9.26~dfsg+0-0ubuntu0.16.04.14+esm6","9.26~dfsg+0-0ubuntu0.16.04.14+esm7","9.26~dfsg+0-0ubuntu0.16.04.14+esm8"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.26~dfsg+0-0ubuntu0.18.04.18+esm4"}]}],"versions":["9.21~dfsg+1-0ubuntu3","9.22~dfsg+1-0ubuntu1","9.22~dfsg+1-0ubuntu1.1","9.22~dfsg+1-0ubuntu1.2","9.25~dfsg+1-0ubuntu0.18.04.1","9.25~dfsg+1-0ubuntu0.18.04.2","9.26~dfsg+0-0ubuntu0.18.04.1","9.26~dfsg+0-0ubuntu0.18.04.3","9.26~dfsg+0-0ubuntu0.18.04.4","9.26~dfsg+0-0ubuntu0.18.04.5","9.26~dfsg+0-0ubuntu0.18.04.6","9.26~dfsg+0-0ubuntu0.18.04.7","9.26~dfsg+0-0ubuntu0.18.04.8","9.26~dfsg+0-0ubuntu0.18.04.9","9.26~dfsg+0-0ubuntu0.18.04.10","9.26~dfsg+0-0ubuntu0.18.04.11","9.26~dfsg+0-0ubuntu0.18.04.12","9.26~dfsg+0-0ubuntu0.18.04.13","9.26~dfsg+0-0ubuntu0.18.04.14","9.26~dfsg+0-0ubuntu0.18.04.15","9.26~dfsg+0-0ubuntu0.18.04.16","9.26~dfsg+0-0ubuntu0.18.04.17","9.26~dfsg+0-0ubuntu0.18.04.18","9.26~dfsg+0-0ubuntu0.18.04.18+esm1","9.26~dfsg+0-0ubuntu0.18.04.18+esm2","9.26~dfsg+0-0ubuntu0.18.04.18+esm3"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.50~dfsg-5ubuntu4.15+esm1"}]}],"versions":["9.27~dfsg+0-0ubuntu3","9.27~dfsg+0-0ubuntu4","9.50~dfsg-5ubuntu1","9.50~dfsg-5ubuntu2","9.50~dfsg-5ubuntu3","9.50~dfsg-5ubuntu4","9.50~dfsg-5ubuntu4.1","9.50~dfsg-5ubuntu4.2","9.50~dfsg-5ubuntu4.3","9.50~dfsg-5ubuntu4.4","9.50~dfsg-5ubuntu4.5","9.50~dfsg-5ubuntu4.6","9.50~dfsg-5ubuntu4.7","9.50~dfsg-5ubuntu4.8","9.50~dfsg-5ubuntu4.9","9.50~dfsg-5ubuntu4.10","9.50~dfsg-5ubuntu4.11","9.50~dfsg-5ubuntu4.12","9.50~dfsg-5ubuntu4.13","9.50~dfsg-5ubuntu4.14","9.50~dfsg-5ubuntu4.15"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.55.0~dfsg1-0ubuntu5.12"}]}],"versions":["9.54.0~dfsg1-0ubuntu2","9.55.0~dfsg1-0ubuntu4","9.55.0~dfsg1-0ubuntu5","9.55.0~dfsg1-0ubuntu5.1","9.55.0~dfsg1-0ubuntu5.2","9.55.0~dfsg1-0ubuntu5.3","9.55.0~dfsg1-0ubuntu5.4","9.55.0~dfsg1-0ubuntu5.5","9.55.0~dfsg1-0ubuntu5.6","9.55.0~dfsg1-0ubuntu5.7","9.55.0~dfsg1-0ubuntu5.9","9.55.0~dfsg1-0ubuntu5.10","9.55.0~dfsg1-0ubuntu5.11"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.02.1~dfsg1-0ubuntu7.7"}]}],"versions":["10.01.2~dfsg1-0ubuntu2","10.01.2~dfsg1-0ubuntu2.1","10.02.1~dfsg1-0ubuntu1","10.02.1~dfsg1-0ubuntu2","10.02.1~dfsg1-0ubuntu5","10.02.1~dfsg1-0ubuntu6","10.02.1~dfsg1-0ubuntu7","10.02.1~dfsg1-0ubuntu7.1","10.02.1~dfsg1-0ubuntu7.3","10.02.1~dfsg1-0ubuntu7.4","10.02.1~dfsg1-0ubuntu7.5","10.02.1~dfsg1-0ubuntu7.6"],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.05.1-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.06.0-160000.1.1"}]}],"bundled":6}],"products":[{"vendor":"artifex","product":"ghostscript"}],"references":[{"url":"https://bugs.ghostscript.com/show_bug.cgi?id=708446","tags":["Issue Tracking","report"]},{"url":"https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=b587663c623b4462f9e78686a31fd880207303ee","tags":["Patch","fix"]},{"url":"http://www.openwall.com/lists/oss-security/2025/05/23/2","tags":["Mailing List","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48708","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-7q9j-33vm-8375"},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1778749215.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1778897873.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-48708","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0170.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34307","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2025/05/23/2","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1580","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503460-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1243701","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-48708","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503461-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621363-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1245896","tags":["report"]},{"url":"https://bugzilla.suse.com/1250353","tags":["report"]},{"url":"https://bugzilla.suse.com/1250354","tags":["report"]},{"url":"https://bugzilla.suse.com/1250355","tags":["report"]},{"url":"https://bugzilla.suse.com/1257699","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-46646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-59801","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2025-48708","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-48708","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7623-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-39327","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-29508","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56826","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-56827","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-27832","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-27835","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-27836","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-48708","description":"gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF document includes its password in cleartext.","status":"published","published":"2025-05-23T00:00:00Z","modified":"2025-05-24T00:11:29.484Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-212"],"updated_at":"2026-11-02T14:32:41.41198Z"}],"euvd":[{"id":"EUVD-2025-28243","description":"gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF document includes its password in cleartext.","status":"published","published":"2025-05-23T00:00:00Z","modified":"2025-05-24T00:11:29Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:32:38.869898Z"}],"ghsa":[{"id":"GHSA-7q9j-33vm-8375","title":"gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript through 10.05.0 lacks...","description":"gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript through 10.05.0 lacks argument sanitization for the # case.","status":"published","published":"2025-05-23T06:30:30Z","modified":"2025-05-24T03:30:19Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-212"],"updated_at":"2026-11-02T15:02:26.348006Z"}],"nvd":[{"id":"CVE-2025-48708","description":"gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF document includes its password in cleartext.","status":"published","published":"2025-05-23T04:15:32.793Z","modified":"2026-06-17T09:30:12.84Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-212"],"updated_at":"2026-11-02T14:11:09.562272Z"}],"osv":[{"id":"CVE-2025-48708","description":"gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF document includes its password in cleartext.","status":"published","published":"2025-05-23T04:15:32.793Z","modified":"2026-04-29T18:29:29.473015377Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:44:50.037003Z"},{"id":"DEBIAN-CVE-2025-48708","description":"gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF document includes its password in cleartext.","status":"published","published":"2025-05-23T04:15:32.793Z","modified":"2026-09-01T20:05:53.049863854Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:45:47.378563Z"},{"id":"OESA-2025-1580","title":"ghostscript security update","description":"Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.\r\n\r\nSecurity Fix(es):\n\ngs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF document includes its password in cleartext.(CVE-2025-48708)","status":"published","published":"2025-05-30T11:08:40Z","modified":"2026-08-18T01:17:59.767690517Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"UBUNTU-CVE-2025-48708","description":"gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF document includes its password in cleartext.","status":"published","published":"2025-05-23T04:15:00Z","modified":"2026-04-22T16:03:40.043479Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T16:55:50.31802Z"},{"id":"CLSA-2026-1778749215","title":"ghostscript: Fix of 2 CVEs","description":"- CVE-2024-29508: heap pointer disclosure in pdf_base_font_alloc via\n  synthesized BaseFont name\n- CVE-2025-48708: argument sanitisation missed '#' separator, leaking\n  -sUserPassword#secret values into output PDF metadata","status":"published","published":"2026-05-14T09:06:42Z","modified":"2026-06-01T00:32:30.260123819Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1778897873","title":"ghostscript: Fix of CVE-2025-48708","description":"- CVE-2025-48708: fix argument sanitization to redact values supplied with '#' separator","status":"published","published":"2026-05-16T02:17:58Z","modified":"2026-06-01T00:32:53.552882146Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"MGASA-2025-0170","title":"Updated ghostscript packages fix security vulnerabilities","description":"gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript\nbefore 10.05.1 lacks argument sanitization for the # case. A created PDF\ndocument includes its password in cleartext. (CVE-2025-48708)\n","status":"published","published":"2025-05-28T19:45:40Z","modified":"2026-04-16T04:44:35.666826233Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15413-1","title":"ghostscript-10.05.1-1.1 on GA media","description":"These are all security issues fixed in the ghostscript-10.05.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-08-06T00:00:00Z","modified":"2026-03-23T04:53:44.41619Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2026:20592-1","title":"Security update for ghostscript","description":"This update for ghostscript fixes the following issues:\n\nUpdate to version 10.06.0.\n\nSecurity issues fixed:\n\n- CVE-2025-59800: an integer overflow can lead to a heap-based buffer overflow in ocr_line8 (bsc#1250355).\n- CVE-2025-59799: a large size value can cause a stack-based buffer overflow in pdfmark_coerce_dest (bsc#1250354).\n- CVE-2025-59798: stack-based buffer overflow in pdf_write_cmap can lead to a denial-of-service (bsc#1250353).\n- CVE-2025-48708: lacks of argument sanitization may lead to password disclosure (bsc#1243701).\n- CVE-2025-46646: mishandling of overlong utf-8 encoding in artifex ghostscript's decode_utf8 function (bsc#1257699).\n\nOther updates and bugfixes:\n\n- switch over to libalternatives for ghostscript to provide a gs\n  variant (bsc#1245896)\n\n- Version upgrade to 10.06.0:\n\n  * removes the non-standard operator \"selectdevice\"\n    (cf. the entry below dated Tue Apr  1 09:56:06 UTC 2025)\n\n- Version upgrade to 10.05.1:\n\n  * an overflow issue in Freetype on platforms\n      where long is a 4 byte (rather than 8 byte) type\n      (Microsoft Windows, for example) causing corrupted\n      glyph rendering at higher resolutions\n  * an issue with embedded files, affecting Zugferd\n      format PDF creation.\n  * broken logic in PDF Optional Content processing\n  * potential slow down due to searching for identifiable\n      font files\n  * a small number of extreme edge case segmentation faults.\n","status":"published","published":"2026-04-21T09:49:39Z","modified":"2026-04-23T18:26:50.459659Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2025-48708","title":"CVE-2025-48708 in ghostscript - Patched by Root","description":"Root has patched CVE-2025-48708 in the ghostscript package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-08-28T06:29:27Z","modified":"2026-08-28T08:45:03.224804977Z","updated_at":"2026-11-02T15:53:31.514195Z"},{"id":"SUSE-SU-2025:03460-1","title":"Security update for ghostscript","description":"This update for ghostscript fixes the following issues:\n\n- CVE-2025-48708: Fixed password disclosure due to lacks of argument sanitization (bsc#1243701)\n","status":"published","published":"2025-10-07T07:35:51Z","modified":"2026-02-04T02:25:39.162609Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:03461-1","title":"Security update for ghostscript","description":"This update for ghostscript fixes the following issues:\n\n- CVE-2025-48708: Fixed password disclosure due to lacks of argument sanitization (bsc#1243701)\n","status":"published","published":"2025-10-07T07:37:02Z","modified":"2026-02-04T02:20:36.038285Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2026:21363-1","title":"Security update for ghostscript","description":"This update for ghostscript fixes the following issues:\n\nUpdate to version 10.06.0.\n\nSecurity issues fixed:\n\n- CVE-2025-59800: an integer overflow can lead to a heap-based buffer overflow in ocr_line8 (bsc#1250355).\n- CVE-2025-59799: a large size value can cause a stack-based buffer overflow in pdfmark_coerce_dest (bsc#1250354).\n- CVE-2025-59798: stack-based buffer overflow in pdf_write_cmap can lead to a denial-of-service (bsc#1250353).\n- CVE-2025-48708: lacks of argument sanitization may lead to password disclosure (bsc#1243701).\n- CVE-2025-46646: mishandling of overlong utf-8 encoding in artifex ghostscript's decode_utf8 function (bsc#1257699).\n\nOther updates and bugfixes:\n\n- switch over to libalternatives for ghostscript to provide a gs\n  variant (bsc#1245896)\n\n- Version upgrade to 10.06.0:\n\n  * removes the non-standard operator \"selectdevice\"\n    (cf. the entry below dated Tue Apr  1 09:56:06 UTC 2025)\n\n- Version upgrade to 10.05.1:\n\n  * an overflow issue in Freetype on platforms\n      where long is a 4 byte (rather than 8 byte) type\n      (Microsoft Windows, for example) causing corrupted\n      glyph rendering at higher resolutions\n  * an issue with embedded files, affecting Zugferd\n      format PDF creation.\n  * broken logic in PDF Optional Content processing\n  * potential slow down due to searching for identifiable\n      font files\n  * a small number of extreme edge case segmentation faults.\n","status":"published","published":"2026-04-21T09:48:49Z","modified":"2026-04-29T18:23:58.003052Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"USN-7623-1","title":"ghostscript vulnerabilities","description":"It was discovered that OpenJPEG, vendored in Ghostscript did not correctly\nhandle large image files. If a user or system were tricked into opening a\nspecially crafted file, an attacker could possibly use this issue to cause\na denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu\n18.04 LTS. (CVE-2023-39327)  Thomas Rinsma discovered that Ghostscript did\nnot correctly handle printing certain variables. An attacker could possibly\nuse this issue to leak sensitive information. This issue only affected\nUbuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2024-29508)  It was discovered\nthat Ghostscript did not correctly handle loading certain libraries. An\nattacker could possibly use this issue to execute arbitrary code. This\nissue only affected Ubuntu 16.04 LTS. (CVE-2024-33871)  It was discovered\nthat Ghostscript did not correctly handle certain memory operations. An\nattacker could possibly use this issue to execute arbitrary code. This\nissue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2024-56826,\nCVE-2024-56827, CVE-2025-27832, CVE-2025-27835, CVE-2025-27836)  Vasileios\nFlengas discovered that Ghostscript did not correctly handle argument\nsanitization. An attacker could possibly use this issue to leak sensitive\ninformation. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS,\nUbuntu 24.04 LTS, Ubuntu 24.10 and Ubuntu 25.04. (CVE-2025-48708)","status":"published","published":"2025-07-08T03:48:52Z","modified":"2026-06-25T13:32:30.535129232Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}