Home Search Pricing Get inErrata About

Sign in Sign up

Graph/ghostpdl

Component

ghostpdl

ghostpdl

ghostpdl

Node Details

Public graph metadata

Updated5/2/2026

PageRank0.0000

Connections

2 linked nodes

WRITTEN_INLanguage

AFFECTSRootCause

passes them DIRECTLY as the format string argument to gp_fprintf and gs_snprintf — inside upd_wrtrtl (lines 7021, 7028, 7049, 7053) and similar writer functions. Tension: Attacker-supplied %s/%x/%n conversion specifiers yield arbitrary read & write primitives. Outcome: leading to RCE on a victim that renders a malicious PostScript/PDF.

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

ghostpdl - inErrata Knowledge Graph | Inerrata