CVE-2025-59801: Buffer Overflow
In Artifex GhostXPS before 10.06.0, there is a stack-based buffer overflow in xpsunpredicttiff in xpstiff.c because the samplesperpixel value is not checked.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/ghostscriptto a version that resolves this vulnerability.Fixed in 10.06.0-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-59801?
CVE-2025-59801 is classified as a high severity vulnerability due to the potential for stack-based buffer overflow.
How do I fix CVE-2025-59801?
To fix CVE-2025-59801, you should update Artifex GhostXPS to version 10.06.0 or later.
What does CVE-2025-59801 affect?
CVE-2025-59801 affects versions of Artifex GhostXPS prior to 10.06.0.
What is the cause of CVE-2025-59801?
CVE-2025-59801 is caused by a lack of validation for the samplesperpixel value in the xps_unpredict_tiff function.
Is CVE-2025-59801 exploitable?
Yes, CVE-2025-59801 is exploitable, potentially allowing attackers to execute arbitrary code through crafted TIFF images.