CVE-2023-52722

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-04-28 · updated 2026-06-17

Description

An issue was discovered in Artifex Ghostscript before 10.03.1. psi/zmisc1.c, when SAFER mode is used, allows eexec seeds other than the Type 1 standard.

Affected products

Artifex Ghostscript: before 10.03.1 — fixed in 10.03.1

How to fix

Upgrade to a fixed version: Artifex Ghostscript 10.03.1. Check the vendor advisory for mitigations.

References

http://www.openwall.com/lists/oss-security/2024/06/28/2
https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=afd7188f74918cb51b5fb89f52b54eb16e8acfd1
http://www.openwall.com/lists/oss-security/2024/06/28/2
https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=afd7188f74918cb51b5fb89f52b54eb16e8acfd1

Get alerted when CVE-2023-52722 or the next vulnerability affects your stack