CVE-2022-1350
Ghostscript vulnerability analysis and mitigation

Overview

A vulnerability classified as problematic was found in GhostPCL 9.55.0, affecting the function chunkfreeobject in the file gsmchunk.c. The vulnerability leads to memory corruption when manipulating malicious files. While the attack can be initiated remotely, it requires user interaction. The vulnerability has been publicly disclosed with a proof of concept available (Debian Tracker).

Technical details

The vulnerability specifically impacts the chunkfreeobject function within gsmchunk.c, leading to memory corruption when processing malicious files. The issue affects multiple versions of the software, including GhostPCL 9.55.0 and various Debian distributions such as bullseye, bookworm, and sid (Debian Tracker).

Impact

The vulnerability can result in memory corruption when processing malicious files, potentially affecting system stability and security. The attack vector requires user interaction but can be initiated remotely (Debian Tracker).

Mitigation and workarounds

It is recommended to apply the available patches to address this vulnerability. Various Debian distributions have released updated versions to address the issue (Debian Tracker).

Additional resources


SourceThis report was generated using AI

Related Ghostscript vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-59800MEDIUM5.5
  • GhostscriptGhostscript
  • ghostscript-doc
NoYesSep 22, 2025
CVE-2025-59799MEDIUM5.5
  • GhostscriptGhostscript
  • cpe:2.3:a:artifex:ghostscript
NoYesSep 22, 2025
CVE-2025-59798MEDIUM5.5
  • GhostscriptGhostscript
  • ghostscript-devel
NoYesSep 22, 2025
CVE-2025-7462MEDIUM5.3
  • GhostscriptGhostscript
  • ghostscript
NoYesJul 12, 2025
CVE-2025-59801MEDIUM4.3
  • GhostscriptGhostscript
  • ghostscript
NoYesSep 22, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management