by Kastro
Paper/Archive/CVE-2020-36773

CVE-2020-36773

mitre — Artifex Ghostscript before 9.53.0 has an out-of-bounds write and use-after-free in devices/vector/gdevtxtw.c (for txtwrite) because a sin…

EPSS 0.9%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (ADP, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 59.1.591 × 2011.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Artifex Ghostscript before 9.53.0 has an out-of-bounds write and use-after-free in devices/vector/gdevtxtw.c (for txtwrite) because a single character code in a PDF document can map to more than one Unicode code point (e.g., for a ligature).

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refbugs.ghostscript.com/show_bug.cgi?id=702229refgit.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=8c7bd787defa071c96289b7da9397f673fddb874refbugzilla.opensuse.org/show_bug.cgi?id=1177922refgithub.com/ArtifexSoftware/ghostpdl-downloads/releases/tag/gs9530