CVE-2025-7462

MEDIUM EPSS 30.7%

Published Jul 12, 202511mo ago · Modified Jun 17, 20262w ago

5.3 CVSS 4.0

Medium

Published Jul 12, 2025 11mo ago

Last Modified Jun 17, 2026 2w ago

Description

A vulnerability was found in Artifex GhostPDL up to 3989415a5b8e99b9d1b87cc9902bde9b7cdea145. It has been classified as problematic. This affects the function pdf_ferror of the file devices/vector/gdevpdf.c of the component New Output File Open Error Handler. The manipulation leads to null pointer dereference. It is possible to initiate the attack remotely. The identifier of the patch is 619a106ba4c4abed95110f84d5efcd7aee38c7cb. It is recommended to apply a patch to fix this issue.

CVSS Details

Base Score

5.3

Exploitability

—

Impact

—

Vector string

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction P

Scope X

Threat Intelligence

EPSS Exploit Probability

30.7% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 2

CWE-404

CWE-476 NULL Pointer Dereference Memory Safety

References 6

artifex.com https://artifex.com/
cgit.ghostscript.com https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=619a106ba4c4
lists.debian.org https://lists.debian.org/debian-lts-announce/2025/10/msg00010.html
vuldb.com https://vuldb.com/?ctiid.316113
vuldb.com https://vuldb.com/?id.316113
vuldb.com https://vuldb.com/?submit.610173

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.