CVE-2025-59801: Artifex Ghostxps

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

In Artifex GhostXPS before 10.06.0, there is a stack-based buffer overflow in xps_unpredict_tiff in xpstiff.c because the samplesperpixel value is not checked.

Affected products

• Artifex Ghostxps: before 10.06.0 (fixed in 10.06.0)

Published 2025-09-22. Last modified 2026-09-30.