Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
ArtifexSoftware/ghostpdl
master @ f13745a
421
Fixes
0
CVEs
CRITICAL
Peak severity
40.6%
Coverage
Highlights
Buffer Overflow: 110 prior fixes. Scrutinize any change in this area.
psi/zcolor.c: most-fixed (15 issues). Treat as high-risk during review.
359 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Buffer Overflow: Numerous fixes address heap overflows, out-of-bounds writes/reads, and integer overflows in image composition, Huffman table parsing, symbol dictionaries, and MMR decoding. The decoder is a high-risk attack surface for crafted images.
Integer Overflow: Multiple fixes target integer overflows in width*height*components or raster*height calculations across devices (gdevp14, gdevprn, gdevmem, gxdownscale, sjpx_openjpeg, XPS). These lead to undersized allocations and subsequent heap overflows.
Out-of-bounds Read/Write: Fixes in xpstiff.c, xpsfont.c, xpscff.c, xpsglyphs.c, and xpscolor.c address missing bounds checks on TIFF strips, JPEGTables, font table offsets, and color component counts, leading to OOB reads/writes.