What’s Vulnerable › Vulnerabilities

CVE-2019-25059

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-04-25 · updated 2026-06-17

Description

Artifex Ghostscript through 9.26 mishandles .completefont. NOTE: this issue exists because of an incomplete fix for CVE-2019-3839.

Affected products

• Artifex Ghostscript: through 9.26
• Debian Linux: 9.0

References

• http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=430e219ea17a2650577d70021399c4ead05869e0
• https://lists.debian.org/debian-lts-announce/2022/05/msg00000.html
• http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=430e219ea17a2650577d70021399c4ead05869e0
• https://lists.debian.org/debian-lts-announce/2022/05/msg00000.html

Get alerted when CVE-2019-25059 or the next vulnerability affects your stack