4.0
Medium
CVE-2025-48708 gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization…
Description
gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF document includes its password in cleartext.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ghostscript 10.05 | earliest → < 10.05.1 | 10.05.1 |
Other CVEs of ghostscript
The 15 CVEs of ghostscript →
CVE-2026-103226
A vulnerability was identified in Artifex Ghostscript up to 10.07.0
5.3
Medium
CVE-2025-59800
In Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdevpdfocr.c has an integer overflow that leads to a…
4.3
Medium
CVE-2025-59799
Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfmark_coerce_dest in…
4.3
Medium
CVE-2025-59798
Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdf_write_cmap in devices/vector/gdevpdtw.c
4.3
Medium