Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc.
Platform | Package | Release Date | Advisory |
---|---|---|---|
Amazon Linux 2 - Core | ghostscript | 2024-08-01 03:01 | ALAS2-2024-2614 |
Amazon Linux 2023 | ghostscript | 2024-08-01 04:06 | ALAS2023-2024-692 |
Score Type | Score | Vector | |
---|---|---|---|
Amazon Linux | CVSSv3 | 4.4 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L |