CVE-2025-48708

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript versions prior to 10.05.1

Description The issue lacks argument sanitization for the # case in the gs lib ctx stash sanitized arg function in base/gslibctx.c. This allows a created PDF document to include its password in cleartext.

Recommendations For versions prior to 10.05.1, update to version 10.05.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of the gs lib ctx stash sanitized arg function in base/gslibctx.c until a patch is available.