CVE-2025-48708: Artifex Ghostscript

Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days.

gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF document includes its password in cleartext.

Affected products

• Artifex Ghostscript: before 10.05.1 (fixed in 10.05.1)

Published 2025-05-23. Last modified 2026-06-17.