Cyber Posture

CVE-2025-27835

High

Published: 25 March 2025

Published
25 March 2025
Modified
03 November 2025
KEV Added
Patch
CVSS Score 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score 0.0006 18.7th percentile
Risk Priority 16 60% EPSS · 20% KEV · 20% CVSS

Description

An adversary may rely upon a user opening a malicious file in order to gain execution.

Security Summary

CVE-2025-27835 is a buffer overflow vulnerability (CWE-120) discovered in Artifex Ghostscript versions before 10.05.0. The flaw occurs in the psi/zbfont.c component during the conversion of glyphs to Unicode, which can lead to memory corruption when processing malformed input.

The vulnerability has a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). A local attacker with no privileges can exploit it by tricking a user into processing a specially crafted file with an affected Ghostscript instance, such as via a PDF viewer or command-line invocation. Successful exploitation could allow arbitrary code execution with the privileges of the Ghostscript process, resulting in high impacts to confidentiality, integrity, and availability.

Advisories recommend upgrading to Ghostscript 10.05.0 or later to mitigate the issue. Additional details are available in the Ghostscript bug report at https://bugs.ghostscript.com/show_bug.cgi?id=708131 and the Debian LTS announcement at https://lists.debian.org/debian-lts-announce/2025/04/msg00014.html.

Details

CWE(s)
CWE-120

Affected Products

artifex
ghostscript
≤ 10.05.0

MITRE ATT&CK Enterprise Techniques

T1203 Exploitation for Client Execution Execution
Adversaries may exploit software vulnerabilities in client applications to execute code.
T1204.002 Malicious File Execution
An adversary may rely upon a user opening a malicious file in order to gain execution.
Why these techniques?

Buffer overflow in Ghostscript file processing (glyph/Unicode conversion) enables arbitrary code execution via crafted malicious file opened by user, directly mapping to client-side exploitation and malicious file delivery.

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

References