CVE-2018-15911

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript versions prior to 9.23

Description The issue is caused by the use of uninitialized memory when manipulating the aesdecode operator in PostScript files. This can be exploited by attackers who supply crafted PostScript files, potentially allowing them to crash the interpreter or execute arbitrary code. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

Recommendations For Artifex Ghostscript versions prior to 9.23, update to version 9.23 or later to resolve the issue. As a temporary workaround, consider restricting the use of the aesdecode operator in PostScript files until a patch is applied. Avoid using crafted PostScript files that could exploit the uninitialized memory access in the aesdecode operator.