OSV-2024-294

Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2024-294.yaml
Published
2024-04-24T00:03:38.661938Z
Modified
2024-05-02T14:25:23.611452Z
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68051

Crash type: Segv on unknown address
Crash state:
gx_device_forward_finalize
gx_device_finalize
pdf14_device_finalize
References

Affected packages

OSS-Fuzz / ghostscript

Package

Name
ghostscript

Affected ranges

Type
GIT
Repo
git://git.ghostscript.com/ghostpdl.git
Events
Introduced
e863d7f2cd68d07e3d0274d93a157d41d748a0c4
Fixed
0733f3c565faea01fc03a1757de05b6d71021264

Affected versions

ghostpdl-10.*

ghostpdl-10.03.0
ghostpdl-10.03.0_test001
ghostpdl-10.03.0_test002
ghostpdl-10.03.0rc1
ghostpdl-10.03.0rc1_test
ghostpdl-10.03.0rc1_test002
ghostpdl-10.03.0rc1_test003
ghostpdl-10.03.1

Other

robin_test_ref

Ecosystem specific 

{
    "severity": null
}

Database specific 

{
    "fixed_range": "05748479d14c28d40a0e58701a115fda2c418d0c:0733f3c565faea01fc03a1757de05b6d71021264"
}