Memcpy-param-overlap in ghostscript: FT_Stream_TryRead
Summary
OSV-2022-538: Memcpy-param-overlap in FT_Stream_TryRead. Affects ghostscript versions >= e784b3314b61f8dfb65e21cd04d7b0ff53251ce1, < 6fd0c14775db5d10563f8b0401ee9f3f6bd29310. Fixed in 6fd0c14775db5d10563f8b0401ee9f3f6bd29310. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Ghostscript is an interpreter for the PostScript language and for PDF files. It is widely used for rendering and printing documents. The vulnerability in question affects the FT_Stream_TryRead function within Ghostscript. This function is responsible for reading data from a font file. The vulnerability arises from a memcpy operation with overlapping source and destination buffers, leading to potential memory corruption.
Vulnerability Detail
The vulnerability, identified as Memcpy-param-overlap, occurs when the FT_Stream_TryRead function is called during font loading. This can be triggered by processing a specially crafted font file. An attacker could exploit this vulnerability to execute arbitrary code, cause a denial-of-service condition, or potentially gain unauthorized access to sensitive information. The vulnerability was discovered through the OSS-Fuzz project, and more details can be found in the provided link.
How To Fix
Minimum fixed version
6fd0c14775db5d10563f8b0401ee9f3f6bd29310
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a workaround, if updating Ghostscript is not immediately feasible, it is recommended to exercise caution when processing font files from untrusted sources. Avoid opening or rendering font files that are not from trusted sources to mitigate the risk of exploitation.
Conclusion
In conclusion, the Memcpy-param-overlap vulnerability in Ghostscript's FT_Stream_TryRead function poses a risk of arbitrary code execution, denial-of-service, or unauthorized access to sensitive information. It is crucial to update Ghostscript to a version that includes the fix or exercise caution when handling font files from untrusted sources. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for ghostscript →
FAQ
Ghostscript is an interpreter for the PostScript language and for PDF files. It is commonly used for rendering and printing documents.
This vulnerability could allow an attacker to execute arbitrary code, cause a denial-of-service condition, or potentially gain unauthorized access to sensitive information.
This vulnerability was discovered through the OSS-Fuzz project, which focuses on fuzzing open-source software to uncover potential vulnerabilities.
To fix this vulnerability, it is recommended to update Ghostscript to a version that includes the fix. The specific fix for this vulnerability can be found in commit 6fd0c14775db5d10563f8b0401ee9f3f6bd29310 of the Ghostscript repository.
As a workaround, exercise caution when processing font files from untrusted sources. Avoid opening or rendering font files that are not from trusted sources.
References
Related vulnerabilities
Recent vulnerabilities recorded for ghostscript.
