{"id":"OSV-2022-1225","aliases":[],"status":"published","title":"Heap-use-after-free in gs_font_finalize","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53847\n\n```\nCrash type: Heap-use-after-free READ 8\nCrash state:\ngs_font_finalize\ngs_gc_reclaim\nireclaim\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2022-11-30T13:00:26.992236Z","modified":"2022-11-30T13:00:26Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"ghostscript","ranges":[{"type":"GIT","events":[{"introduced":"4422012f6b40f0627d3527dba92f3a1ba30017d3"},{"fixed":"01c7ca7efc7c5c3bda61f6de37edd8ae00b40b8b"}]}],"versions":["ghostpdl-10.0.0","ghostpdl-10.0.0_release_tests_002","ghostpdl-10.0.0rc1","ghostpdl-10.0.0rc2"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53847","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2022-1225","title":"Heap-use-after-free in gs_font_finalize","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53847\n\n```\nCrash type: Heap-use-after-free READ 8\nCrash state:\ngs_font_finalize\ngs_gc_reclaim\nireclaim\n```\n","status":"published","published":"2022-11-30T13:00:26.992236Z","modified":"2022-11-30T13:00:26.992476Z","updated_at":"2026-11-02T15:52:49.275624Z"}]}}
