Beveiligingsadvies

CVE-2020-36773

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-02-04 00:00:00
Laatst bijgewerkt 2025-05-22 17:29:16
Toegewezen door mitre
CVSS-score 9.8
Status PUBLISHED

Beschrijving

Artifex Ghostscript before 9.53.0 has an out-of-bounds write and use-after-free in devices/vector/gdevtxtw.c (for txtwrite) because a single character code in a PDF document can map to more than one Unicode code point (e.g., for a ligature).