{"id":"OSV-2022-73","aliases":[],"status":"published","title":"Heap-use-after-free in pdfi_cspace_free_callback","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43904\n\n```\nCrash type: Heap-use-after-free READ 8\nCrash state:\npdfi_cspace_free_callback\ngs_cspace_final\nalloc_restore_step_in\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2022-01-22T00:00:41.413569Z","modified":"2026-10-19T14:46:45Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"ghostscript","ranges":[{"type":"GIT","events":[{"introduced":"82b097fe8e76ea92f69ef483f45c0cf491a98d43"}]}],"versions":["ghostpdl-9.56.0-test-base-3","ghostpdl-9.56.0-test-base-4","ghostpdl-9.56.0-test-base-5","robin-test-base-0","ken_20220210_baseline","ghostpdl-9.56.0rc1_release_tests_001","ghostpdl-9.56.0-test-base-6","ghostpdl-9.56.0rc1_release_tests_002","ghostpdl-9.56.0rc1","ghostpdl-9.56.0rc2","ghostpdl-9.56.0rc2_release_tests_001","ghostpdl-9.56.0","ghostpdl-9.56.1_release_tests_001","ghostpdl-9.56.1","ghostpdl-10.0.0_release_tests_001","ghostpdl-10.0.0_release_tests_002","ghostpdl-10.0.0rc1","ghostpdl-10.0.0rc2","ghostpdl-10.0.0","ghostpdl-10.01.0rc1","ghostpdl-10.01.0rc2","ghostpdl-10.01.0","ghostpdl-10.01.1","ghostpdl-10.02.0-test-base-001","ghostpdl-10.01.1-gse-10174","rjw-test","ghostpdl-10.01.2","ghostpdl-10.02.0rc1","ghostpdl-10.02.0rc2","ghostpdl-10.02.0","ghostpdl-10.02.1","ghostpdl-10.03.0rc1_test","ghostpdl-10.03.0rc1_test002","ghostpdl-10.03.0rc1_test003","ghostpdl-10.03.0rc1","ghostpdl-10.03.0_test001","ghostpdl-10.03.0_test002","robin_test_ref","ghostpdl-10.03.0","ghostpdl-10.03.1","ghostpdl-10.04.0rc1_test001","ghostpdl-10.04.0rc1","ghostpdl-10.04.0rc2_test001","ghostpdl-10.04.0","rjw-test3","ghostpdl-10.05.0-test-base-001","ghostpdl-10.05.0rc1","ghostpdl-10.05.0","ghostpdl-10.05.1rc1_test001","ghostpdl-10.05.1","ghostpdl-10.05.1rc1_test002","ken-test","ghostpdl-10.06.0rc1","ghostpdl-10.06.0rc2","ghostpdl-10.06.0","ghostpdl-10.07.0rc1_test001","ghostpdl-10.07.0rc1_test002","ghostpdl-10.07.0rc1_test003","ghostpdl-10.07.0rc1_test004"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43904","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2022-73","title":"Heap-use-after-free in pdfi_cspace_free_callback","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43904\n\n```\nCrash type: Heap-use-after-free READ 8\nCrash state:\npdfi_cspace_free_callback\ngs_cspace_final\nalloc_restore_step_in\n```\n","status":"published","published":"2022-01-22T00:00:41.413569Z","modified":"2026-10-19T14:46:45.967754Z","updated_at":"2026-11-02T15:52:49.511349Z"}]}}