OSV-2022-719

    Dashboard / Vulnerabilities / OSV-2022-719

    OSV-2022-719

    Published: 17 Aug 2022Last Modified: 17 Aug 2022

    Summary: Stack-buffer-overflow in gs_glyph_data_from_string

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50267 ``` Crash type: Stack-buffer-overflow WRITE 8 Crash state: gs_glyph_data_from_string copied_type1_subr_data gs_type2_interpret ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50267

    Affected packages

    Package

    Name: ghostscript

    Purl: pkg:generic/ghostscript

    Affected ranges

    Type: GIT

    Events:

    Introduced- bb2fd595dd08728323a86a24e0f5643383c92d03
    Fixed -fc370414d680550407d6cb2a8f692c755fa02f6d

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-719 | CVE-DB