CVE-2021-45944

Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampled_data_sample (called from sampled_data_continue and interp).
Configurations

Configuration 1 (hide)

cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:*

History

17 Jan 2022, 18:15

Type Values Removed Values Added
References
  • (MISC) https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30715 -
  • (MISC) https://github.com/google/oss-fuzz-vulns/issues/16 -
  • (MISC) https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=7861fcad13c497728189feafb41cd57b5b50ea25 -

15 Jan 2022, 00:15

Type Values Removed Values Added
References
  • (MLIST) https://lists.debian.org/debian-lts-announce/2022/01/msg00006.html -

10 Jan 2022, 14:11

Type Values Removed Values Added
CVSS v2 : 2.1
v3 : 5.5
v2 : 4.3
v3 : 5.5
References
  • (DEBIAN) https://www.debian.org/security/2022/dsa-5038 -

07 Jan 2022, 18:32

Type Values Removed Values Added
First Time Artifex
Artifex ghostscript
References (MISC) https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29903 - (MISC) https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29903 - Exploit, Issue Tracking, Third Party Advisory
References (MISC) https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml - (MISC) https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml - Third Party Advisory
CPE cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:*
CWE CWE-416
CVSS v2 : unknown
v3 : unknown
v2 : 2.1
v3 : 5.5

01 Jan 2022, 01:15

Type Values Removed Values Added
Summary Ghostscript GhostPDL 9.50 through-9.53.3 has a use-after-free in sampled_data_sample (called from sampled_data_continue and interp). Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampled_data_sample (called from sampled_data_continue and interp).

01 Jan 2022, 00:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-01-01 00:15

Updated : 2022-01-17 18:15


NVD link : CVE-2021-45944

Mitre link : CVE-2021-45944


JSON object : View

Products Affected

artifex

  • ghostscript
CWE
CWE-416

Use After Free