Stack-buffer-overflow in gs_glyph_data_from_bytes in ghostscript
Summary
OSV-2022-744: Stack-buffer-overflow in gs_glyph_data_from_bytes. Affects ghostscript versions >= 441c9e3a4ca08fa7f7c00063af33196b0d88ebaf, < eba3379360caec1d881d96c5d51ed4282278cd1f. Fixed in eba3379360caec1d881d96c5d51ed4282278cd1f. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Ghostscript is an open-source interpreter for the PostScript language and the PDF file format. It is widely used for rendering and converting PostScript and PDF files. The vulnerability in question, identified as OSV-2022-744, affects the gs_glyph_data_from_bytes function in Ghostscript. This function is responsible for processing glyph data from bytes. The vulnerability allows for a stack-buffer-overflow WRITE 8, which can lead to a crash or potentially be exploited by an attacker.
Vulnerability Detail
The stack-buffer-overflow vulnerability in gs_glyph_data_from_bytes arises due to improper handling of glyph data. When processing certain bytes, the function writes more data than can fit in the allocated buffer, resulting in a buffer overflow. This can lead to memory corruption, crashes, or potentially allow an attacker to execute arbitrary code. The vulnerability was discovered through an OSS-Fuzz report and has been assigned a severity rating of HIGH.
How To Fix
Minimum fixed version
eba3379360caec1d881d96c5d51ed4282278cd1f
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a workaround, users can consider implementing input validation and sanitization measures when processing glyph data. By carefully validating and limiting the size of input data, the risk of triggering the buffer overflow can be mitigated. However, it is strongly advised to apply the official fix by updating the Ghostscript package to ensure comprehensive protection against this vulnerability.
Conclusion
In conclusion, the stack-buffer-overflow vulnerability in gs_glyph_data_from_bytes in Ghostscript can lead to crashes or potential code execution. Users are advised to update their Ghostscript installation to a version that includes the fix for comprehensive protection. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for ghostscript →
FAQ
Ghostscript is an open-source interpreter for the PostScript language and the PDF file format. It is commonly used for rendering and converting PostScript and PDF files.
The vulnerability can lead to a stack-buffer-overflow WRITE 8, potentially resulting in crashes or allowing an attacker to execute arbitrary code.
The vulnerability was identified through an OSS-Fuzz report, which is a continuous fuzzing service for open-source software.
This vulnerability has been assigned a severity rating of HIGH.
To fix this vulnerability, it is recommended to update the Ghostscript package to a version that includes the fix. Details on the specific commit containing the fix can be found in the vulnerability details.
References
Related vulnerabilities
Recent vulnerabilities recorded for ghostscript.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
