Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-48708

Fixed in a distro release EPSS <1%CVSS 4.0

gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF document includes its password in cleartext.

Published 2025-05-23 · CVE record · OSV

Products: artifex ghostscript

Distro releases

ReleasePackageFixed in
Amazon Linux 2ghostscript9.54.0-9.amzn2.0.11
Amazon Linux 2ghostscript-cups9.54.0-9.amzn2.0.11
Amazon Linux 2ghostscript-doc9.54.0-9.amzn2.0.11
Amazon Linux 2ghostscript-gtk9.54.0-9.amzn2.0.11
Amazon Linux 2libgs9.54.0-9.amzn2.0.11
Amazon Linux 2libgs-devel9.54.0-9.amzn2.0.11
Amazon Linux 2023ghostscript9.56.1-7.amzn2023.0.17
Amazon Linux 2023ghostscript-doc9.56.1-7.amzn2023.0.17
Amazon Linux 2023ghostscript-gtk9.56.1-7.amzn2023.0.17
Amazon Linux 2023ghostscript-tools-dvipdf9.56.1-7.amzn2023.0.17
Amazon Linux 2023ghostscript-tools-fonts9.56.1-7.amzn2023.0.17
Amazon Linux 2023ghostscript-tools-printing9.56.1-7.amzn2023.0.17
Amazon Linux 2023ghostscript-x119.56.1-7.amzn2023.0.17
Amazon Linux 2023libgs9.56.1-7.amzn2023.0.17
Amazon Linux 2023libgs-devel9.56.1-7.amzn2023.0.17
Arch Linuxghostscript10.05.1-2
Debian 12ghostscriptno fix
Debian 13ghostscript10.05.1~dfsg-1
Debian 14ghostscript10.05.1~dfsg-1
SUSE Linux Enterprise Module for Basesystem 15 SP6ghostscript9.52-150000.206.1
SUSE Linux Enterprise Module for Basesystem 15 SP7ghostscript9.52-150000.206.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5ghostscript9.52-23.92.1
Ubuntu 22.04 LTSghostscript9.55.0~dfsg1-0ubuntu5.12
Ubuntu 24.04 LTSghostscript10.02.1~dfsg1-0ubuntu7.7
Ubuntu Pro 16.04 LTSghostscript9.26~dfsg+0-0ubuntu0.16.04.14+esm9
Ubuntu Pro 18.04 LTSghostscript9.26~dfsg+0-0ubuntu0.18.04.18+esm4
Ubuntu Pro 20.04 LTSghostscript9.50~dfsg-5ubuntu4.15+esm1
openSUSE Leap 15.6ghostscript9.52-150000.206.1
openSUSE Leap 16.0ghostscript10.06.0-160000.1.1
openSUSE Tumbleweedghostscript10.05.1-1.1