Moderate Vulnerability in Ghostscript: Compression Buffer Overflow
Summary
ALSA-2025:8421: Moderate: ghostscript security update. Affects ghostscript versions < 9.27-17.el8_10. Fixed in 9.27-17.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Ghostscript is a suite of software that provides utilities for rendering PostScript and PDF documents. It translates PostScript code into common bitmap formats, enabling the display and printing of documents. Ghostscript is widely used in various applications for document processing, making it a critical component in many systems. However, it is susceptible to vulnerabilities that can be exploited if not properly managed.
Vulnerability Detail
The vulnerability identified as CVE-2025-27832 is a compression buffer overflow in the NPDL device of Ghostscript. This flaw allows an attacker to exploit the buffer overflow, potentially leading to arbitrary code execution or denial of service. The vulnerability arises from improper handling of input data, which can be manipulated to overflow the buffer, compromising the integrity and security of the application.
How To Fix
Minimum fixed version
9.27-17.el8_10
This is the first release that contains the fix.
sudo dnf update ghostscriptTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit the exposure of the Ghostscript application by restricting access to untrusted input sources. Additionally, consider disabling features that utilize the NPDL device until the package is updated.
Conclusion
The Ghostscript vulnerability CVE-2025-27832 poses a moderate risk due to a compression buffer overflow that can be exploited for arbitrary code execution. It is crucial for users to update to the patched version 9.27-17.el8_10 to mitigate this risk. Implementing workarounds can provide temporary relief until the update is applied.
See every vulnerability recorded for ghostscript →
FAQ
CVE-2025-27832 is a vulnerability in Ghostscript that allows for a compression buffer overflow, potentially leading to arbitrary code execution.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If an immediate update is not possible, consider implementing access restrictions to limit exposure to untrusted inputs and disable features that utilize the NPDL device.
Exploitation of this vulnerability could lead to arbitrary code execution, allowing attackers to gain control over the affected system or cause a denial of service.
For more details, refer to the CVE page associated with CVE-2025-27832, which provides in-depth information about the vulnerability and its implications.
Related vulnerabilities
Recent vulnerabilities recorded for ghostscript.
