CVE-2025-27831

Publication date 25 March 2025

Last updated 27 March 2025

Ubuntu priority

Medium

Why this priority?

An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.

Status

Package Ubuntu Release Status
ghostscript 24.10 oracular
Fixed 10.03.1~dfsg1-0ubuntu2.2
24.04 LTS noble
Fixed 10.02.1~dfsg1-0ubuntu7.5
22.04 LTS jammy
Fixed 9.55.0~dfsg1-0ubuntu5.11
20.04 LTS focal
Not affected
18.04 LTS bionic
Not affected
16.04 LTS xenial
Not affected

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
ghostscript

References

Related Ubuntu Security Notices (USN)

    • USN-7378-1
    • Ghostscript vulnerabilities
    • 27 March 2025

Other references