Aggregator

CVE-2025-27836 | Artifex Ghostscript up to 10.04.0 BJ10V Device gdev10v.c buffer overflow (Nessus ID 233372 / WID-SEC-2025-0556)

4 months 3 weeks ago

A vulnerability was found in Artifex Ghostscript. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file contrib/japanese/gdev10v.c of the component BJ10V Device. The manipulation leads to buffer overflow. This vulnerability is known as CVE-2025-27836. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

vuldb.com

CVE-2025-27830 | Artifex Ghostscript up to 10.04.0 base/write_t1.c buffer overflow (Nessus ID 233372 / WID-SEC-2025-0556)

Vuldb Updates

4 months 3 weeks ago

A vulnerability, which was classified as critical, has been found in Artifex Ghostscript. Affected by this issue is some unknown functionality of the file base/write_t1.c. The manipulation leads to buffer overflow. This vulnerability is handled as CVE-2025-27830. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

vuldb.com

CVE-2025-27832 | Artifex Ghostscript up to 10.04.0 NPDL Device gdevnpdl.c buffer overflow (Nessus ID 233372 / WID-SEC-2025-0556)

Vuldb Updates

4 months 3 weeks ago

A vulnerability, which was classified as critical, was found in Artifex Ghostscript. This affects an unknown part of the file contrib/japanese/gdevnpdl.c of the component NPDL Device. The manipulation leads to buffer overflow. This vulnerability is uniquely identified as CVE-2025-27832. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

vuldb.com

CVE-2025-27831 | Artifex Ghostscript up to 10.04.0 DOCXWRITE TXTWRITE Device doc_common.c buffer overflow (Nessus ID 233372 / WID-SEC-2025-0556)

Vuldb Updates

4 months 3 weeks ago

A vulnerability classified as critical was found in Artifex Ghostscript. This vulnerability affects unknown code of the file devices/vector/doc_common.c of the component DOCXWRITE TXTWRITE Device. The manipulation leads to buffer overflow. This vulnerability was named CVE-2025-27831. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

vuldb.com

CVE-2025-27833 | Artifex Ghostscript up to 10.04.0 TTF Font Name pdf/pdf_fmap.c buffer overflow (Nessus ID 233372 / WID-SEC-2025-0556)

Vuldb Updates

4 months 3 weeks ago

A vulnerability has been found in Artifex Ghostscript and classified as critical. This vulnerability affects unknown code of the file pdf/pdf_fmap.c of the component TTF Font Name Handler. The manipulation leads to buffer overflow. This vulnerability was named CVE-2025-27833. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

vuldb.com

CVE-2025-27834 | Artifex Ghostscript up to 10.04.0 PDF Document pdf/pdf_func.c buffer overflow (Nessus ID 233372 / WID-SEC-2025-0556)

Vuldb Updates

4 months 3 weeks ago

A vulnerability, which was classified as critical, has been found in Artifex Ghostscript. This issue affects some unknown processing of the file pdf/pdf_func.c of the component PDF Document Handler. The manipulation leads to buffer overflow. The identification of this vulnerability is CVE-2025-27834. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

vuldb.com

Threat Actors Weaponize Smart Contracts to Drain User Crypto Wallets of More Than $900k

Cyber Security News

4 months 3 weeks ago

In a sophisticated campaign uncovered in early 2024, cybercriminals have begun distributing malicious Ethereum smart contracts masquerading as lucrative trading bots. These weaponized contracts leverage Web3 development platforms such as Remix to entice victims into deploying code that appears to execute arbitrage strategies, only to siphon deposited funds into attacker-controlled wallets. Instead of conducting legitimate […]

The post Threat Actors Weaponize Smart Contracts to Drain User Crypto Wallets of More Than $900k appeared first on Cyber Security News.

Tushar Subhra Dutta