artifex Vulnerability Advisory Catalog

Total 248 security vulnerabilities recorded for artifex software and firmware.

← Back to All Vendors
Component: ghostscript

An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (rela...

📅 2024-11-10
CVSS 7.8 Dossier →
Component: ghostscript

An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation pointer in Pattern color space could lead t...

📅 2024-11-10
CVSS 7.8 Dossier →
Component: ghostscript

An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver library, ex...

📅 2024-07-03
CVSS 8.8 Dossier →
Component: ghostscript

An issue was discovered in Artifex Ghostscript before 10.03.1. There is path traversal (via a crafted PostScript document) to arbitrary files if the c...

📅 2024-07-03
CVSS 6.3 Dossier →
Component: ghostscript

An issue was discovered in Artifex Ghostscript before 10.03.1. Path traversal and command execution can occur (via a crafted PostScript document) beca...

📅 2024-07-03
CVSS 5.3 Dossier →
Component: ghostscript

Artifex Ghostscript before 10.03.1, when Tesseract is used for OCR, has a directory traversal issue that allows arbitrary file reading (and writing of...

📅 2024-07-03
CVSS 7.5 Dossier →
Component: ghostscript

Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device....

📅 2024-07-03
CVSS 6.3 Dossier →
Component: ghostscript

Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters....

📅 2024-07-03
CVSS 5.4 Dossier →
Component: ghostscript

Artifex Ghostscript before 10.03.0 has a heap-based overflow when PDFPassword (e.g., for runpdf) has a \000 byte in the middle....

📅 2024-07-03
CVSS 8.8 Dossier →
Component: ghostscript

Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc...

📅 2024-07-03
CVSS 3.3 Dossier →
Component: ghostscript

Artifex Ghostscript before 10.03.0 has a stack-based buffer overflow in the pdfi_apply_filter() function via a long PDF filter name....

📅 2024-07-03
CVSS 8.8 Dossier →
Component: ghostscript

An issue was discovered in Artifex Ghostscript before 10.03.1. psi/zmisc1.c, when SAFER mode is used, allows eexec seeds other than the Type 1 standar...

📅 2024-04-28
CVSS 5.5 Dossier →
Component: mupdf

freeglut through 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddMenuEntry function....

📅 2024-02-05
CVSS 7.5 Dossier →
Component: mupdf

freeglut 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddSubMenu function....

📅 2024-02-05
CVSS 7.5 Dossier →
CVE-2020-36773 CRITICAL
Component: ghostscript

Artifex Ghostscript before 9.53.0 has an out-of-bounds write and use-after-free in devices/vector/gdevtxtw.c (for txtwrite) because a single character...

📅 2024-02-04
CVSS 9.8 Dossier →
Component: mupdf

A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in functon compute_color() of jquant2.c. NOTE: this i...

📅 2023-12-26
CVSS 7.5 Dossier →
Component: mupdf

A floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in function pnm_binary_read_image() of load-pnm.c when fz_col...

📅 2023-12-26
CVSS 7.5 Dossier →
Component: mupdf

A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function bmp_decompress_rle4() of load-bmp.c....

📅 2023-12-26
CVSS 7.5 Dossier →
Component: mupdf

A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function pnm_binary_read_image() of load-pnm.c whe...

📅 2023-12-26
CVSS 7.5 Dossier →
Component: mupdf

A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in the function fz_new_pixmap_from_float_data() of pi...

📅 2023-12-26
CVSS 7.5 Dossier →
Component: ghostscript

An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the a...

📅 2023-12-06
CVSS 7.5 Dossier →
Component: jbig2dec

Artifex Software jbig2dec v0.20 was discovered to contain a SEGV vulnerability via jbig2_error at /jbig2dec/jbig2.c....

📅 2023-10-31
CVSS 6.5 Dossier →
Component: mupdf

MuPDF v1.21.1 was discovered to contain an infinite recursion in the component pdf_mark_list_push. This vulnerability allows attackers to cause a Deni...

📅 2023-10-31
CVSS 5.5 Dossier →
Component: ghostscript

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can swit...

📅 2023-09-18
CVSS 8.8 Dossier →
Page 2 of 11 (248 Total Records)