Vulnerabilities > CVE-2020-36773 - Use After Free vulnerability in Artifex Ghostscript

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
artifex
CWE-416
critical
NVD
Published: 2024-02-04
Updated: 2024-11-21

Summary

Artifex Ghostscript before 9.53.0 has an out-of-bounds write and use-after-free in devices/vector/gdevtxtw.c (for txtwrite) because a single character code in a PDF document can map to more than one Unicode code point (e.g., for a ligature).

Vulnerable Configurations

Part Description Count
Application
Artifex
5

Common Weakness Enumeration (CWE)

References