All vulnerabilities

Servers and applications

CVE-2023-28879

In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled to one byte less than full, and one then tries to write an escaped character, two bytes are written.

Severity
Critical 9.8
Published
31 Mar 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
10.01.0
Sources
NVD

Affected software

SoftwareAffected versions
GhostscriptServers and applications · cpe:a:artifex:ghostscript
  • Every version before 10.01.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-28879
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-28879