Medium severity4.3NVD Advisory· Published Sep 22, 2025· Updated Apr 15, 2026

CVE-2025-59801

Description

In Artifex GhostXPS before 10.06.0, there is a stack-based buffer overflow in xps_unpredict_tiff in xpstiff.c because the samplesperpixel value is not checked.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Artifex/Ghostpdlinferred
Range: <10.06.0
Artifex/Ghostscript Ghostxpsllm-fuzzy
Range: <10.06.0
osv-coords2 versions
pkg:rpm/opensuse/ghostscript&distro=openSUSE%20Leap%2016.0 pkg:rpm/opensuse/ghostscript&distro=openSUSE%20Tumbleweed
< 10.06.0-160000.1.1+ 1 more
- (no CPE)range: < 10.06.0-160000.1.1
- (no CPE)range: < 10.06.0-2.1

Patches

Vulnerability mechanics

References

bugs.ghostscript.com/show_bug.cginvd
cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/nvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000