In Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdevpdfocr.c has an integer overflow that leads to a heap-based buffer overflow in ocr_line8.
| Version | Score | Severity | Vector String |
|---|---|---|---|
| 3.1 | 4.3 | Medium | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N |
| Product | Vendor | Version |
|---|---|---|
| Ghostscript | Artifex | 12.6(2)_504_Issue_ET |
| Ghostscript | Artifex | Android-10, Android-11 |