OSV-2022-640

    Dashboard / Vulnerabilities / OSV-2022-640

    OSV-2022-640

    Published: 28 Jul 2022Last Modified: 28 Jul 2022

    Summary: Stack-use-after-return in rc_free_text_enum

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49530 ``` Crash type: Stack-use-after-return READ 8 Crash state: rc_free_text_enum gs_text_release pdf_text_release ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49530

    Affected packages

    Package

    Name: ghostscript

    Purl: pkg:generic/ghostscript

    Affected ranges

    Type: GIT

    Events:

    Introduced- e292bb232c987c50671699a8dd8172c0d7adcfe3
    Fixed -3e86fa5ea2da0bde5e1fd9adaf297be874417993

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-640 | CVE-DB