CVE-2022-1350

MEDIUM

GhostPCL 9.55.0 - Memory Corruption in gsmchunk.c chunk_free_object

Title source: llm
STIX 2.1

Description

A vulnerability classified as problematic was found in GhostPCL 9.55.0. This vulnerability affects the function chunk_free_object of the file gsmchunk.c. The manipulation with a malicious file leads to a memory corruption. The attack can be initiated remotely but requires user interaction. The exploit has been disclosed to the public as a POC and may be used. It is recommended to apply the patches to fix this issue.

References (3)

Core 3
Core References
Permissions Required, Vendor Advisory x_refsource_misc
https://bugs.ghostscript.com/show_bug.cgi?id=705156
Permissions Required, Vendor Advisory x_refsource_misc
https://bugs.ghostscript.com/attachment.cgi?id=22323
Third Party Advisory x_refsource_misc
https://vuldb.com/?id.197290

Scores

CVSS v3 4.3
EPSS 0.0042
EPSS Percentile 61.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-119 CWE-787
Status published
Products (1)
artifex/ghostpcl 9.55.0
Published Apr 14, 2022
Tracked Since Feb 18, 2026