CVE-2025-59800 Integer overflow in Ghostscript
An integer overflow in Ghostscript's OCR device can lead to a heap-based buffer overflow, potentially allowing code execution or denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-59800?
CVE-2025-59800 is a medium-severity vulnerability in Artifex Ghostscript, published on 22 Sep 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdevpdfocr.c has an integer overflow that leads to a heap-based buffer overflow in ocr_line8.
Weakness: CWE-190
Which versions are affected by CVE-2025-59800?
It affects 1 product.
Products include Artifex Ghostscript.
How do I fix CVE-2025-59800?
Upgrade to a fixed version.
Is CVE-2025-59800 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-59800 exists.
Other vulnerabilities in Artifex Ghostscript
Sources
Also known as ALPINE-CVE-2025-59800, BELL-CVE-2025-59800, DEBIAN-CVE-2025-59800, ECHO-c407-4140-3bfe, GHSA-2mxc-fm8x-qgcp, MINI-4j4h-c8xr-3fxf and 1 more.