Heap-buffer-overflow in ghostscript: mem_mono_copy_mono
Summary
OSV-2022-47: Heap-buffer-overflow in mem_mono_copy_mono. Affects ghostscript versions >= 75fbddf52051987287e62d13c659eb73ba16982f, < fd267e86e80929b9b82d8741552250a121d4f8c9. Fixed in fd267e86e80929b9b82d8741552250a121d4f8c9. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Ghostscript is an open-source interpreter for the PostScript language and the PDF file format. It is widely used for rendering and converting documents. The vulnerability in question, identified as OSV-2022-47, affects the mem_mono_copy_mono function in Ghostscript. This function is responsible for copying monochrome image data, and the vulnerability leads to a heap-buffer-overflow read of 2 bytes.
Vulnerability Detail
The vulnerability arises due to a heap-buffer-overflow read in the mem_mono_copy_mono function. This can potentially be exploited by an attacker to execute arbitrary code or cause a denial-of-service condition. The issue was discovered through an OSS-Fuzz report and has been assigned a medium severity level. The crash state indicates that the vulnerability occurs in the mem_mapped4_copy_color and tile_clip_copy_color functions as well.
How To Fix
Minimum fixed version
fd267e86e80929b9b82d8741552250a121d4f8c9
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a workaround, if updating the package is not immediately feasible, it is advisable to exercise caution when processing untrusted PostScript or PDF files. Limiting exposure to potentially malicious inputs can help mitigate the risk of exploitation.
Conclusion
In conclusion, the mem_mono_copy_mono function in Ghostscript is vulnerable to a heap-buffer-overflow read. It is recommended to update the package to a version that includes the fix or apply the provided workaround. For further assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for ghostscript →
FAQ
Ghostscript is an open-source interpreter for the PostScript language and the PDF file format. It is commonly used for rendering and converting documents.
The vulnerability can potentially allow an attacker to execute arbitrary code or cause a denial-of-service condition.
The vulnerability was discovered through an OSS-Fuzz report.
This vulnerability has been assigned a medium severity level.
A workaround is to exercise caution when processing untrusted PostScript or PDF files.
References
Related vulnerabilities
Recent vulnerabilities recorded for ghostscript.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
