Search for vulnerabilities
Vulnerability details: VCID-yk2r-rt5x-63d9
Vulnerability ID VCID-yk2r-rt5x-63d9
Aliases CVE-2025-27830
Summary An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c.
Status Published
Exploitability 0.5
Weighted Severity 5.0
Risk 2.5
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
System Score Found at
cvssv3 5.5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-27830.json
epss 0.00015 https://api.first.org/data/v1/epss?cve=CVE-2025-27830
epss 0.00015 https://api.first.org/data/v1/epss?cve=CVE-2025-27830
epss 0.00015 https://api.first.org/data/v1/epss?cve=CVE-2025-27830
epss 0.00015 https://api.first.org/data/v1/epss?cve=CVE-2025-27830
epss 0.00015 https://api.first.org/data/v1/epss?cve=CVE-2025-27830
epss 0.00015 https://api.first.org/data/v1/epss?cve=CVE-2025-27830
epss 0.00026 https://api.first.org/data/v1/epss?cve=CVE-2025-27830
epss 0.00026 https://api.first.org/data/v1/epss?cve=CVE-2025-27830
epss 0.00026 https://api.first.org/data/v1/epss?cve=CVE-2025-27830
epss 0.00026 https://api.first.org/data/v1/epss?cve=CVE-2025-27830
epss 0.00026 https://api.first.org/data/v1/epss?cve=CVE-2025-27830
epss 0.00026 https://api.first.org/data/v1/epss?cve=CVE-2025-27830
epss 0.00026 https://api.first.org/data/v1/epss?cve=CVE-2025-27830
epss 0.00026 https://api.first.org/data/v1/epss?cve=CVE-2025-27830
epss 0.00026 https://api.first.org/data/v1/epss?cve=CVE-2025-27830
epss 0.00026 https://api.first.org/data/v1/epss?cve=CVE-2025-27830
epss 0.00026 https://api.first.org/data/v1/epss?cve=CVE-2025-27830
epss 0.00026 https://api.first.org/data/v1/epss?cve=CVE-2025-27830
cvssv3.1 7.8 https://bugs.ghostscript.com/show_bug.cgi?id=708241
ssvc Track https://bugs.ghostscript.com/show_bug.cgi?id=708241
cvssv3.1 5 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-27830.json
https://api.first.org/data/v1/epss?cve=CVE-2025-27830
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27830
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2354953 https://bugzilla.redhat.com/show_bug.cgi?id=2354953
cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:*
CVE-2025-27830 https://nvd.nist.gov/vuln/detail/CVE-2025-27830
show_bug.cgi?id=708241 https://bugs.ghostscript.com/show_bug.cgi?id=708241
USN-7378-1 https://usn.ubuntu.com/7378-1/
No exploits are available.
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-27830.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://bugs.ghostscript.com/show_bug.cgi?id=708241
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-03-26T13:36:52Z/ Found at https://bugs.ghostscript.com/show_bug.cgi?id=708241
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.01915
EPSS Score 0.00015
Published At Aug. 11, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:50:01.022871+00:00 Alpine Linux Importer Import https://secdb.alpinelinux.org/v3.20/main.json 37.0.0