CVE-2025-7462: 
Ghostscript vulnerability analysis and mitigation

A vulnerability (CVE-2025-7462) was discovered in Artifex GhostPDL up to version 3989415a5b8e99b9d1b87cc9902bde9b7cdea145, affecting the pdf_ferror function in the devices/vector/gdevpdf.c file of the New Output File Open Error Handler component. The vulnerability was disclosed on July 12, 2025, and has been classified as problematic (NVD, VulDB).

The vulnerability is a null pointer dereference issue that occurs in the pdf_ferror function when handling file operations. The function attempts to perform operations on a file pointer without properly checking if it's null, which can lead to a crash. The vulnerability has received a CVSS v3.1 base score of 4.3 (MEDIUM) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L (VulDB).

The vulnerability primarily affects system availability, as successful exploitation can cause the application to crash due to the null pointer dereference. The impact is limited to availability with no direct effect on confidentiality or integrity of the system (VulDB).

A patch has been released with the identifier 619a106ba4c4abed95110f84d5efcd7aee38c7cb that fixes the vulnerability by adding proper null pointer checks before performing file operations. It is recommended to apply this patch to affected systems (Ghostscript Commit).