OSV-2022-206

    Dashboard / Vulnerabilities / OSV-2022-206

    OSV-2022-206

    Published: 27 Feb 2022Last Modified: 20 Oct 2026

    Summary: Heap-buffer-overflow in spgetcc

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45049 ``` Crash type: Heap-buffer-overflow READ {*} Crash state: spgetcc gs_scan_token gs_interpret ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45049

    Affected packages

    Package

    Name: ghostscript

    Purl: pkg:generic/ghostscript

    Affected ranges

    Type: GIT

    Events:

    Introduced- 4297fa6c36ccd90859f2cc13f563d87326b0705a
    Fixed -a424f166ee9c1196a6cd7e2ee2289f81545d022d

    Affected versions

    ghostpdl-9.55.0
    ghostpdl-9.55.0rc1
    ghostpdl-9.55.0rc1_test_001

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-206 | CVE-DB