Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-27835

Fixed in a distro release EPSS <1%CVSS 7.8

An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c.

Published 2025-03-25 · CVE record · OSV

Products: artifex ghostscript

Distro releases

ReleasePackageFixed in
Alpine 3.18ghostscript10.05.0
Alpine 3.19ghostscript10.05.0-r0
Alpine 3.20ghostscript10.05.0-r0
Alpine 3.21ghostscript10.05.0-r0
Alpine 3.22ghostscript10.05.0-r0
Alpine 3.23ghostscript10.05.0-r0
Amazon Linux 2ghostscript9.54.0-9.amzn2.0.10
Amazon Linux 2ghostscript-cups9.54.0-9.amzn2.0.10
Amazon Linux 2ghostscript-doc9.54.0-9.amzn2.0.10
Amazon Linux 2ghostscript-gtk9.54.0-9.amzn2.0.10
Amazon Linux 2libgs9.54.0-9.amzn2.0.10
Amazon Linux 2libgs-devel9.54.0-9.amzn2.0.10
Amazon Linux 2023ghostscript9.56.1-7.amzn2023.0.16
Amazon Linux 2023ghostscript-doc9.56.1-7.amzn2023.0.16
Amazon Linux 2023ghostscript-gtk9.56.1-7.amzn2023.0.16
Amazon Linux 2023ghostscript-tools-dvipdf9.56.1-7.amzn2023.0.16
Amazon Linux 2023ghostscript-tools-fonts9.56.1-7.amzn2023.0.16
Amazon Linux 2023ghostscript-tools-printing9.56.1-7.amzn2023.0.16
Amazon Linux 2023ghostscript-x119.56.1-7.amzn2023.0.16
Amazon Linux 2023libgs9.56.1-7.amzn2023.0.16
Amazon Linux 2023libgs-devel9.56.1-7.amzn2023.0.16
Debian 11ghostscript9.53.3~dfsg-7+deb11u10
Debian 12ghostscript10.0.0~dfsg-11+deb12u7
Debian 13ghostscript10.05.0~dfsg-1
Debian 14ghostscript10.05.0~dfsg-1
SUSE Enterprise Storage 7.1ghostscript9.52-150000.203.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSghostscript9.52-150000.203.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSghostscript9.52-150000.203.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSghostscript9.52-150000.203.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSghostscript9.52-150000.203.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSghostscript9.52-150000.203.1
SUSE Linux Enterprise Module for Basesystem 15 SP6ghostscript9.52-150000.203.1
SUSE Linux Enterprise Server 12 SP5-LTSSghostscript9.52-23.89.1
SUSE Linux Enterprise Server 15 SP3-LTSSghostscript9.52-150000.203.1
SUSE Linux Enterprise Server 15 SP4-LTSSghostscript9.52-150000.203.1
SUSE Linux Enterprise Server 15 SP5-LTSSghostscript9.52-150000.203.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5ghostscript9.52-23.89.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3ghostscript9.52-150000.203.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4ghostscript9.52-150000.203.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5ghostscript9.52-150000.203.1
SUSE Manager Proxy 4.3ghostscript9.52-150000.203.1
SUSE Manager Server 4.3ghostscript9.52-150000.203.1
Ubuntu 20.04 LTSghostscript9.50~dfsg-5ubuntu4.15
Ubuntu 22.04 LTSghostscript9.55.0~dfsg1-0ubuntu5.11
Ubuntu 22.04 LTSghostscript9.55.0~dfsg1-0ubuntu5.12
Ubuntu 24.04 LTSghostscript10.02.1~dfsg1-0ubuntu7.5
Ubuntu 24.04 LTSghostscript10.02.1~dfsg1-0ubuntu7.7
Ubuntu Pro 16.04 LTSghostscript9.26~dfsg+0-0ubuntu0.16.04.14+esm9
Ubuntu Pro 18.04 LTSghostscript9.26~dfsg+0-0ubuntu0.18.04.18+esm4
Ubuntu Pro 20.04 LTSghostscript9.50~dfsg-5ubuntu4.15+esm1
openSUSE Leap 15.6ghostscript9.52-150000.203.1
openSUSE Tumbleweedghostscript10.05.0-1.1