CVE-2025-59801
CVE-2025-59801
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In Artifex GhostXPS before 10.06.0, there is a stack-based buffer overflow in xps_unpredict_tiff in xpstiff.c because the samplesperpixel value is not checked.
CVSS 4.3 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
ghostxps
- Versions
- ≥ 0, < 10.06.0: Affected (custom)
Update to 10.06.0
ghostscript Debian:12
- Versions
- 10.0.0~dfsg-11
- 10.0.0~dfsg-11+deb12u1
- 10.0.0~dfsg-11+deb12u2
- 10.0.0~dfsg-11+deb12u3
- 10.0.0~dfsg-11+deb12u4
- 10.0.0~dfsg-11+deb12u5
- 10.0.0~dfsg-11+deb12u6
- 10.0.0~dfsg-11+deb12u7
- 10.0.0~dfsg-11+deb12u8
- 10.01.2~dfsg-1
- 10.02.0~dfsg-1
- 10.02.0~dfsg-2
- 10.02.1~dfsg-1
- 10.02.1~dfsg-2
- 10.02.1~dfsg-3
- 10.03.0~dfsg-1
- 10.03.1~dfsg-1
- 10.03.1~dfsg-2
- 10.03.1~dfsg~git20240518-1
- 10.04.0~dfsg-1
- 10.04.0~dfsg-2
- 10.05.0~dfsg-1
- 10.05.1~dfsg-1
- 10.05.1~dfsg-2
- 10.05.1~dfsg-3
- 10.06.0~dfsg-1
- 10.06.0~dfsg-2
- 10.06.0~dfsg-3
- 10.07.0~dfsg-1
- 10.07.0~dfsg-2
- 10.07.1~dfsg-1
- 10.08.0~dfsg-1
- 10.08.0~dfsg-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ghostscript Debian:13
- Versions
- 10.05.1~dfsg-1
- 10.05.1~dfsg-1+deb13u1
- 10.05.1~dfsg-1+deb13u2
- 10.05.1~dfsg-2
- 10.05.1~dfsg-3
- 10.06.0~dfsg-1
- 10.06.0~dfsg-2
- 10.06.0~dfsg-3
- 10.07.0~dfsg-1
- 10.07.0~dfsg-2
- 10.07.1~dfsg-1
- 10.08.0~dfsg-1
- 10.08.0~dfsg-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ghostscript Debian:14
- Versions
- 10.05.1~dfsg-1
- 10.05.1~dfsg-2
- 10.05.1~dfsg-3
- Affected ranges
- ECOSYSTEM: < 10.06.0~dfsg-1
Update to 10.06.0~dfsg-1