CVE-2020-36773
Fixed in a distro release EPSS <1%CVSS 9.8
Artifex Ghostscript before 9.53.0 has an out-of-bounds write and use-after-free in devices/vector/gdevtxtw.c (for txtwrite) because a single character code in a PDF document can map to more than one Unicode code point (e.g., for a ligature).
Products: artifex ghostscript
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | ghostscript | 9.25-5.amzn2.0.9 |
| Amazon Linux 2 | ghostscript-cups | 9.25-5.amzn2.0.9 |
| Amazon Linux 2 | ghostscript-doc | 9.25-5.amzn2.0.9 |
| Amazon Linux 2 | ghostscript-gtk | 9.25-5.amzn2.0.9 |
| Amazon Linux 2 | libgs | 9.25-5.amzn2.0.9 |
| Amazon Linux 2 | libgs-devel | 9.25-5.amzn2.0.9 |
| Debian 12 | ghostscript | 9.53.0~dfsg-1 |
| Debian 13 | ghostscript | 9.53.0~dfsg-1 |
| Debian 14 | ghostscript | 9.53.0~dfsg-1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | ghostscript | 9.52-150000.185.1 |
| SUSE Linux Enterprise Server 12 SP5 | ghostscript | 9.52-23.71.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | ghostscript | 9.52-23.71.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | ghostscript | 9.52-23.71.1 |
| openSUSE Leap 15.5 | ghostscript | 9.52-150000.185.1 |