CVE-2020-15900
ghostscript: Memory Corruption in Ghostscript 9.52 (SAFER Sandbox Breakout)
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 27, 2020
Updated · June 27, 2026
Description
Ghostscript's rsearch procedure was vulnerable to an integer underflow, leading to a miscalculation of the size of a buffer, which then can be used to access arbitrary memory. As a result, a specially crafted postscript file could use this flaw to disable the sandbox, which allows arbitrary reads and writes on the file system and execute commands.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CWE-131 · Incorrect Calculation of Buffer Size