Moderate Vulnerability in Ghostscript: Compression Buffer Overflow
Summary
RLSA-2025:8421: Moderate: ghostscript security update. Affects ghostscript versions < 0:9.27-17.el8_10. Fixed in 0:9.27-17.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Ghostscript is a suite of software that provides utilities for rendering PostScript and PDF documents. It translates PostScript code into common bitmap formats, enabling the display and printing of these documents. Ghostscript is widely used in various applications for document processing and printing tasks. However, it has been identified to have a security vulnerability that could potentially compromise the integrity of the system using it.
Vulnerability Detail
The vulnerability identified in Ghostscript is a compression buffer overflow associated with the NPDL device, tracked as CVE-2025-27832. This issue arises from improper handling of data during the compression process, which can lead to a buffer overflow. An attacker could exploit this vulnerability to execute arbitrary code, potentially leading to unauthorized access or system crashes. The CVSS score for this vulnerability is 5.5, indicating a moderate severity level.
How To Fix
Minimum fixed version
0:9.27-17.el8_10
This is the first release that contains the fix.
sudo dnf update ghostscriptTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the available patch as soon as possible.
Conclusion
In summary, the Ghostscript package has a moderate vulnerability related to a compression buffer overflow. Users are advised to update to the latest patched version to mitigate any potential risks associated with this vulnerability. Regular monitoring and updates are essential for maintaining system security.
See every vulnerability recorded for ghostscript →
FAQ
The vulnerability is a compression buffer overflow that can lead to arbitrary code execution.
You can use Vulert's playground at Vulert Scanner to check if your application is affected without needing to sign up.
The CVSS score for this vulnerability is 5.5, indicating a moderate severity level.
You should update Ghostscript to the patched version 0:9.27-17.el8_10 using the command 'sudo dnf update ghostscript'.
Currently, there are no specific workarounds available. Updating to the patched version is the recommended action.
Related vulnerabilities
Recent vulnerabilities recorded for ghostscript.
