CVE-2025-59800: Integer Overflow
In Artifex Ghostscript through 10.05.1, ocrbeginpage in devices/gdevpdfocr.c has an integer overflow that leads to a heap-based buffer overflow in ocrline8.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/ghostscriptto a version that resolves this vulnerability.Fixed in 10.06.0-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-59800?
CVE-2025-59800 is classified as a critical vulnerability due to its potential for causing a heap-based buffer overflow.
How do I fix CVE-2025-59800?
To fix CVE-2025-59800, update Artifex Ghostscript to version 10.05.2 or later.
What versions of Artifex Ghostscript are affected by CVE-2025-59800?
CVE-2025-59800 affects Artifex Ghostscript versions up to and including 10.05.1.
What is the impact of CVE-2025-59800?
The impact of CVE-2025-59800 is that it can lead to remote code execution through a heap-based buffer overflow.
Is there a workaround for CVE-2025-59800?
As a temporary measure, users can disable features that utilize the vulnerable ocr_begin_page function until a patch is applied.