| CVE-2020-27792 | CAO7.1 | A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF file, triggering the heap buffer overflow that could lead to memory corruption or a denial of service. | 19/08/2022 |
| CVE-2022-2085 | TRUNG BÌNH5.5 | A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it relies on an init_device_procs defined for the device that uses it as a prototype that depends upon the number of bits per pixel. For bpp > 64, me | 16/06/2022 |
| CVE-2022-30975 | TRUNG BÌNH5.5 | In Artifex MuJS through 1.2.0, jsP_dumpsyntax in jsdump.c has a NULL pointer dereference, as demonstrated by mujs-pp. | 18/05/2022 |
| CVE-2022-30974 | TRUNG BÌNH5.5 | compile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of unlimited recursion, a different issue than CVE-2019-11413. | 18/05/2022 |
| CVE-2019-25059 | CAO7.8 | Artifex Ghostscript through 9.26 mishandles .completefont. NOTE: this issue exists because of an incomplete fix for CVE-2019-3839. | 25/04/2022 |
| CVE-2022-1350 | CAO7.8 | A vulnerability classified as problematic was found in GhostPCL 9.55.0. This vulnerability affects the function chunk_free_object of the file gsmchunk.c. The manipulation with a malicious file leads to a memory corruption. The attack can be initiated remotely but requires user interaction. The exploit has been disclose | 14/04/2022 |
| CVE-2021-3781 | NGHIÊM TRỌNG9.9 | A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary commands on the system in the context of the ghostscript interpreter. The highest threat from this | 16/02/2022 |
| CVE-2021-45005 | NGHIÊM TRỌNG9.8 | Artifex MuJS v1.1.3 was discovered to contain a heap buffer overflow which is caused by conflicting JumpList of nested try/finally statements. | 14/02/2022 |
| CVE-2021-45949 | TRUNG BÌNH5.5 | Ghostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampled_data_finish (called from sampled_data_continue and interp). | 01/01/2022 |
| CVE-2021-45944 | TRUNG BÌNH5.5 | Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampled_data_sample (called from sampled_data_continue and interp). | 01/01/2022 |
| CVE-2021-37220 | TRUNG BÌNH5.5 | MuPDF through 1.18.1 has an out-of-bounds write because the cached color converter does not properly consider the maximum key size of a hash table. This can, for example, be seen with crafted "mutool draw" input. | 21/07/2021 |
| CVE-2020-19609 | TRUNG BÌNH5.5 | Artifex MuPDF before 1.18.0 has a heap based buffer over-write in tiff_expand_colormap() function when parsing TIFF files allowing attackers to cause a denial of service. | 21/07/2021 |
| CVE-2020-22886 | CAO7.5 | Buffer overflow vulnerability in function jsG_markobject in jsgc.c in mujs before 1.0.8, allows remote attackers to cause a denial of service. | 13/07/2021 |
| CVE-2020-22885 | CAO7.5 | Buffer overflow vulnerability in mujs before 1.0.8 due to recursion in the GC scanning phase, allows remote attackers to cause a denial of service. | 13/07/2021 |
| CVE-2021-3407 | TRUNG BÌNH5.5 | A flaw was found in mupdf 1.18.0. Double free of object during linearization may lead to memory corruption and other potential consequences. | 23/02/2021 |
| CVE-2020-16600 | CAO7.8 | A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newband_writer. | 09/12/2020 |
| CVE-2020-26519 | TRUNG BÌNH5.5 | Artifex MuPDF before 1.18.0 has a heap based buffer over-write when parsing JBIG2 files allowing attackers to cause a denial of service. | 02/10/2020 |
| CVE-2020-14373 | TRUNG BÌNH5.5 | A use after free was found in igc_reloc_struct_ptr() of psi/igc.c of ghostscript-9.25. A local attacker could supply a specially crafted PDF file to cause a denial of service. | 03/09/2020 |
| CVE-2020-24343 | CAO7.8 | Artifex MuJS through 1.0.7 has a use-after-free in jsrun.c because of unconditional marking in jsgc.c. | 13/08/2020 |
| CVE-2020-17538 | TRUNG BÌNH5.5 | A buffer overflow vulnerability in GetNumSameData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51. | 13/08/2020 |