CVE-2020-16303

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A use-after-free vulnerability in xps_finish_image_path() in devices/vector/gdevxps.c of Artifex Software GhostScript v9.50 allows a remote attacker to escalate privileges via a crafted PDF file. This is fixed in v9.51.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://bugs.ghostscript.com/show_bug.cgi?id=701818Exploit, Issue Tracking, Vendor Advisory
https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=94d8955cb77
https://lists.debian.org/debian-lts-announce/2020/08/msg00032.htmlMailing List, Third Party Advisory
https://security.gentoo.org/glsa/202008-20Third Party Advisory
https://usn.ubuntu.com/4469-1/Third Party Advisory
https://www.debian.org/security/2020/dsa-4748Third Party Advisory
https://bugs.ghostscript.com/show_bug.cgi?id=701818Exploit, Issue Tracking, Vendor Advisory
https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=94d8955cb77
https://lists.debian.org/debian-lts-announce/2020/08/msg00032.htmlMailing List, Third Party Advisory
https://security.gentoo.org/glsa/202008-20Third Party Advisory
https://usn.ubuntu.com/4469-1/Third Party Advisory
https://www.debian.org/security/2020/dsa-4748Third Party Advisory

Timeline

Published: Aug 13, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-163045.5A buffer overflow vulnerability in image_render_color_thresh() in base/gxicolor.c of Artifex Software GhostScript v9.18 to v9.50 allows a re CVE-2020-163055.5A buffer overflow vulnerability in pcx_write_rle() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attac CVE-2020-163065.5A null pointer dereference vulnerability in devices/gdevtsep.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a den CVE-2020-163075.5A null pointer dereference vulnerability in devices/vector/gdevtxtw.c and psi/zbfont.c of Artifex Software GhostScript v9.50 allows a remote CVE-2020-163085.5A buffer overflow vulnerability in p_print_image() in devices/gdevcdj.c of Artifex Software GhostScript v9.50 allows a remote attacker to ca CVE-2020-163095.5A buffer overflow vulnerability in lxm5700m_print_page() in devices/gdevlxm.c of Artifex Software GhostScript v9.50 allows a remote attacker CVE-2020-16319.8A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with W CVE-2020-163105.5A division by zero vulnerability in dot24_print_page() in devices/gdevdm24.c of Artifex Software GhostScript v9.50 allows a remote attacker CVE-2020-16328.6In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evolved devices to adver CVE-2020-16336.5Due to a new NDP proxy feature for EVPN leaf nodes introduced in Junos OS 17.4, crafted NDPv6 packets could transit a Junos device configure CVE-2020-16347.5On High-End SRX Series devices, in specific configurations and when specific networking events or operator actions occur, an SPC receiving g CVE-2020-16376.5A vulnerability in Juniper Networks SRX Series device configured as a Junos OS Enforcer device may allow a user to access network resources