CVE-2025-7462

Artifex GhostPDL New Output File Open Error gdevpdf.c pdf_ferror null pointer dereference

State: Published
Severity: 5.3 Medium
Published: Jul 12, 2025
Updated: Nov 3, 2025
Reserved: Jul 11, 2025

Description

A vulnerability was found in Artifex GhostPDL up to 3989415a5b8e99b9d1b87cc9902bde9b7cdea145. It has been classified as problematic. This affects the function pdf_ferror of the file devices/vector/gdevpdf.c of the component New Output File Open Error Handler. The manipulation leads to null pointer dereference. It is possible to initiate the attack remotely. The identifier of the patch is 619a106ba4c4abed95110f84d5efcd7aee38c7cb. It is recommended to apply a patch to fix this issue.

Scores

CVSS	Score	Vector	Source
4.0	5.3 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X	VulDB
3.1	4.3 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C	VulDB
3.0	4.3 Medium	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C	VulDB
2.0	5.0 Medium	AV:N/AC:L/Au:N/C:N/I:N/A:P/E:ND/RL:OF/RC:C	VulDB

Weaknesses

CWE-476 NULL Pointer Dereference
CWE-404 Denial of Service

Affected Products

Product	Versions
GhostPDLArtifex	3989415a5b8e99b9d1b87cc9902bde9b7cdea145Affected

References

VDB-316113 | Artifex GhostPDL New Output File Open Error gdevpdf.c pdf_ferror null pointer dereferencevdb-entrytechnical-description
VDB-316113 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
Submit #610173 | ArtifexSoftware GhostPDL 3989415a5b8e99b9d1b87cc9902bde9b7cdea145 NULL Pointer Dereferencethird-party-advisory
https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=619a106ba4c4patch
https://artifex.com/product
https://lists.debian.org/debian-lts-announce/2025/10/msg00010.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.