CVE-2025-48708
Quick assessment
Affected
Artifex Ghostscript
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Artifex Ghostscript是美国Artifex公司的一套建基于 Adobe、PostScript 及可移植文档格式的页面描述语言等而编译成的自由软件。 Artifex Ghostscript 10.05.1之前版本存在安全漏洞，该漏洞源于缺少参数清理，可能导致密码明文泄露。
Possible ATT&CK Techniques 1 AI
T1562
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-48708
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF document includes its password in cleartext.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
敏感数据的不恰当跨边界移除
Source: CVE Program / CVE List V5
Vulnerability Title
Artifex Ghostscript 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Artifex Ghostscript是美国Artifex公司的一套建基于 Adobe、PostScript 及可移植文档格式的页面描述语言等而编译成的自由软件。 Artifex Ghostscript 10.05.1之前版本存在安全漏洞，该漏洞源于缺少参数清理，可能导致密码明文泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Artifex | Ghostscript | 0 ~ 10.05.1 | - |
|
II. Public POCs for CVE-2025-48708
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | CVE-2025-48708 Ghostscript PDF lack of argument sanitization leading to password leakage | https://github.com/B1tBreaker/CVE-2025-48708 | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-48708
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same product: Ghostscript
-
CVE-2026-103226
Artifex Ghostscript Pdfwrite gdevpsfx.c type1_callsubr stack -
CVE-2026-19547
Local Privilege Escalation in Ghostscript for Windows -
CVE-2026-39919
Ghostscript < 10.08.0 Heap Buffer Overflow via JPEG 2000 Out -
CVE-2025-59799
Artifex Ghostscript 安全漏洞 -
CVE-2025-59798
Artifex Ghostscript 安全漏洞
Same vendor: Artifex
-
CVE-2026-103226
Artifex Ghostscript Pdfwrite gdevpsfx.c type1_callsubr stack -
CVE-2026-92413
Artifex MuPDF PDF Xref Loading pdf-stream.c pdf_open_filter -
CVE-2026-7233
Artifex MuPDF CFF Index subset-cff.c fz_subset_cff_for_gids -
CVE-2025-15569
Artifex MuPDF win_main.c get_system_dpi uncontrolled search -
CVE-2025-59799
Artifex Ghostscript 安全漏洞
Same weakness: CWE-212
-
CVE-2026-96879
"Checked by" label in page history should not be shown if th -
CVE-2026-17511
This Power System update is being released to address -
CVE-2026-90860
Canva鸿蒙版1.15.1前WebView会话劫持漏洞 -
CVE-2026-67071
HCL DevOps Deploy / HCL Launch is susceptible to an Improper -
CVE-2026-73440
Security Advisory 0178
V. Comments for CVE-2025-48708
No comments yet