Medium severity4.0NVD Advisory· Published May 23, 2025· Updated Jun 17, 2026
CVE-2025-48708
CVE-2025-48708
Description
gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF document includes its password in cleartext.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:*range: <10.05.1
- (no CPE)range: <10.05.1
- (no CPE)range: 0
- osv-coords6 versionspkg:rpm/opensuse/ghostscript&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/ghostscript&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/ghostscript&distro=openSUSE%20Tumbleweedpkg:rpm/suse/ghostscript&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6pkg:rpm/suse/ghostscript&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7pkg:rpm/suse/ghostscript&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5
< 9.52-150000.206.1+ 5 more
- (no CPE)range: < 9.52-150000.206.1
- (no CPE)range: < 10.06.0-160000.1.1
- (no CPE)range: < 10.05.1-1.1
- (no CPE)range: < 9.52-150000.206.1
- (no CPE)range: < 9.52-150000.206.1
- (no CPE)range: < 9.52-23.92.1
Patches
Vulnerability mechanics
References
3- cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/nvdPatch
- www.openwall.com/lists/oss-security/2025/05/23/2nvdMailing List
- bugs.ghostscript.com/show_bug.cginvdIssue Tracking
News mentions
0No linked articles in our index yet.