| Package | Affected versions | Patched versions |
|---|---|---|
| ghostscript | = 9.51= 9.52= 9.52.1= 9.53.0 |
Artifex Ghostscript before 9.53.0 has an out-of-bounds write and use-after-free in devices/vector/gdevtxtw.c (for txtwrite) because a single character code in a PDF document can map to more than one Unicode code point (e.g., for a ligature).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free