← All advisories

Medium severity4.3NVD Advisory· Published Sep 22, 2025· Updated Jun 17, 2026

CVE-2025-59799

CVE-2025-59799

Description

Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfmark_coerce_dest in devices/vector/gdevpdfm.c via a large size value.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

15

Artifex/Ghostscript3 versions
cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:*range: <=10.05.1
- (no CPE)range: <=10.05.1
- (no CPE)range: 0
osv-coords12 versions
pkg:apk/chainguard/ghostscript pkg:apk/chainguard/ghostscript-dbg pkg:apk/chainguard/ghostscript-doc pkg:apk/wolfi/ghostscript pkg:apk/wolfi/ghostscript-dbg pkg:apk/wolfi/ghostscript-doc pkg:rpm/opensuse/ghostscript&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/ghostscript&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/ghostscript&distro=openSUSE%20Tumbleweed pkg:rpm/suse/ghostscript&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6 pkg:rpm/suse/ghostscript&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7 pkg:rpm/suse/ghostscript&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5
< 10.07.0-r0+ 11 more
- (no CPE)range: < 10.07.0-r0
- (no CPE)range: < 10.07.0-r0
- (no CPE)range: < 10.07.0-r0
- (no CPE)range: < 10.07.0-r0
- (no CPE)range: < 10.07.0-r0
- (no CPE)range: < 10.07.0-r0
- (no CPE)range: < 9.52-150000.211.1
- (no CPE)range: < 10.06.0-160000.1.1
- (no CPE)range: < 10.06.0-2.1
- (no CPE)range: < 9.52-150000.211.1
- (no CPE)range: < 9.52-150000.211.1
- (no CPE)range: < 9.52-23.97.1

Patches

Vulnerability mechanics

References

3

cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/nvdPatch
bugs.ghostscript.com/show_bug.cginvdIssue Tracking
lists.debian.org/debian-lts-announce/2025/10/msg00010.htmlnvd

News mentions

0

No linked articles in our index yet.