CVE-2020-15900 PUBLISHED

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32_t. This was fixed in commit 5d499272b95a6b890a1397e11d20937de000d31b.

EPSS 11.03% · 93.4th percentile

Risk Scores

EPSS Score
11.03%
93.4th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSghostscript0, 9.27~dfsg+0-0ubuntu3, 9.27~dfsg+0-0ubuntu4

Timeline

References

Open in Interactive Console →