CVE-2021-45944

 

Published at: - 01-01-2022 01:15

Last modified: - 21-01-2022 03:41

Total changes: - 7

Description

Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampled_data_sample (called from sampled_data_continue and interp).

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

 

Verification logic

 

Reference

• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29903
• https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
• DSA-5038-Third Party Advisory
• [debian-lts-announce] 20220114 [SECURITY] [DLA 2879-1] ghostscript security update-Mailing List, Third Party Advisory
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30715
• https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=7861fcad13c497728189feafb41cd57b5b50ea25
• https://github.com/google/oss-fuzz-vulns/issues/16

 

Keywords

NVD

 

CVE-2021-45944

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures