CVE-2025-48708 Information disclosure in Ghostscript
Ghostscript fails to sanitize arguments, causing PDF passwords to be stored in cleartext, allowing attackers to read sensitive credentials.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-48708?
CVE-2025-48708 is a medium-severity vulnerability in Artifex Ghostscript, published on 23 May 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF document includes its password in cleartext.
Weakness: CWE-212
Which versions are affected by CVE-2025-48708?
It affects 1 product.
Linux distribution packages (4)
ghostscript SUSE:Linux Enterprise Module for Basesystem 15 SP6 | All versions | 9.52-150000.206.1 |
ghostscript SUSE:Linux Enterprise Module for Basesystem 15 SP7 | All versions | 9.52-150000.206.1 |
ghostscript SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | All versions | 9.52-23.92.1 |
ghostscript openSUSE:Leap 15.6 | All versions | 9.52-150000.206.1 |
Products include Artifex Ghostscript.
How do I fix CVE-2025-48708?
Upgrade to a fixed version.
Is CVE-2025-48708 being exploited?
There is no known exploitation of CVE-2025-48708 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in Artifex Ghostscript
Sources
Also known as CLSA-2026-1778897873, DEBIAN-CVE-2025-48708, GHSA-7q9j-33vm-8375, MGASA-2025-0170, MINI-9gvx-v692-rpjx, OESA-2025-1580 and 4 more.