Search for vulnerabilities
Vulnerability details: VCID-4r9b-8dpu-hkej
Vulnerability ID VCID-4r9b-8dpu-hkej
Aliases CVE-2025-27836
Summary An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c.
Status Published
Exploitability 0.5
Weighted Severity 5.0
Risk 2.5
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
System Score Found at
cvssv3 5.5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-27836.json
epss 0.0007 https://api.first.org/data/v1/epss?cve=CVE-2025-27836
epss 0.0007 https://api.first.org/data/v1/epss?cve=CVE-2025-27836
epss 0.0007 https://api.first.org/data/v1/epss?cve=CVE-2025-27836
epss 0.0007 https://api.first.org/data/v1/epss?cve=CVE-2025-27836
epss 0.0007 https://api.first.org/data/v1/epss?cve=CVE-2025-27836
epss 0.0007 https://api.first.org/data/v1/epss?cve=CVE-2025-27836
epss 0.0007 https://api.first.org/data/v1/epss?cve=CVE-2025-27836
epss 0.0009 https://api.first.org/data/v1/epss?cve=CVE-2025-27836
epss 0.0009 https://api.first.org/data/v1/epss?cve=CVE-2025-27836
epss 0.0009 https://api.first.org/data/v1/epss?cve=CVE-2025-27836
epss 0.0009 https://api.first.org/data/v1/epss?cve=CVE-2025-27836
epss 0.0009 https://api.first.org/data/v1/epss?cve=CVE-2025-27836
epss 0.0009 https://api.first.org/data/v1/epss?cve=CVE-2025-27836
epss 0.0009 https://api.first.org/data/v1/epss?cve=CVE-2025-27836
epss 0.0009 https://api.first.org/data/v1/epss?cve=CVE-2025-27836
epss 0.0009 https://api.first.org/data/v1/epss?cve=CVE-2025-27836
epss 0.0009 https://api.first.org/data/v1/epss?cve=CVE-2025-27836
epss 0.0009 https://api.first.org/data/v1/epss?cve=CVE-2025-27836
epss 0.0009 https://api.first.org/data/v1/epss?cve=CVE-2025-27836
cvssv3.1 9.8 https://bugs.ghostscript.com/show_bug.cgi?id=708192
ssvc Track https://bugs.ghostscript.com/show_bug.cgi?id=708192
cvssv3.1 7.1 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-27836.json
https://api.first.org/data/v1/epss?cve=CVE-2025-27836
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27836
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2354952 https://bugzilla.redhat.com/show_bug.cgi?id=2354952
cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:*
CVE-2025-27836 https://nvd.nist.gov/vuln/detail/CVE-2025-27836
show_bug.cgi?id=708192 https://bugs.ghostscript.com/show_bug.cgi?id=708192
USN-7378-1 https://usn.ubuntu.com/7378-1/
USN-7623-1 https://usn.ubuntu.com/7623-1/
No exploits are available.
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-27836.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://bugs.ghostscript.com/show_bug.cgi?id=708192
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-03-26T13:18:16Z/ Found at https://bugs.ghostscript.com/show_bug.cgi?id=708192
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.21961
EPSS Score 0.0007
Published At Aug. 11, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:50:09.881811+00:00 Ubuntu USN Importer Import https://usn.ubuntu.com/7378-1/ 37.0.0