CVE catalog

CVE-2022-2085

ghostscript: CVE-2022-2085

Severity: Medium
Published: Jun 16, 2022, 6:15:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 1.41% · Oct 22, 2026

A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it relies on an init_device_procs defined for the device that uses it as a prototype that depends upon the number of bits per pixel. For bpp > 64, mem_x_device is used and does not have an init_device_procs defined. This flaw allows an attacker to parse a large number of bits (more than 64 bits per pixel), which triggers a NULL pointer dereference flaw, causing an application to crash.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	ghostscript	sid	`10.08.0~dfsg-2`	fixed
Debian	ghostscript	forky	`10.08.0~dfsg-2`	fixed
Debian	ghostscript	trixie	`10.05.1~dfsg-1+deb13u1`	fixed
Debian	ghostscript	trixie-security	`10.05.1~dfsg-1+deb13u3`	fixed
Debian	ghostscript	bookworm	`10.0.0~dfsg-11+deb12u8`	fixed
Debian	ghostscript	bookworm-security	`10.0.0~dfsg-11+deb12u8`	fixed
Ubuntu	ghostscript	22.04	`9.54.0~dfsg1-0ubuntu2`	vulnerable
Ubuntu	ghostscript	22.04	`9.55.0~dfsg1-0ubuntu4`	vulnerable
Ubuntu	ghostscript	22.04	`9.55.0~dfsg1-0ubuntu5`	vulnerable
Ubuntu	ghostscript	22.04	`9.55.0~dfsg1-0ubuntu5.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	ghostscript	source	sid	`9.56.0~dfsg-1`	not yet assigned	Not reported	Not reported
Debian	ghostscript	source	forky	`9.56.0~dfsg-1`	not yet assigned	Not reported	Not reported
Debian	ghostscript	source	trixie	`9.56.0~dfsg-1`	not yet assigned	Not reported	Not reported
Debian	ghostscript	source	bookworm	`9.56.0~dfsg-1`	not yet assigned	Not reported	Not reported
Ubuntu	ghostscript	deb	22.04	`9.55.0~dfsg1-0ubuntu5.1`	Not reported	UBUNTU-CVE-2022-2085	Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[ghostscript]Unknown
Details (4)
- 10.0.0~dfsg-11+deb12u8 · amd64 · bookworm
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
- 10.0.0~dfsg-11+deb12u8 · arm64 · bookworm
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
- 10.0.0~dfsg-11+deb12u8 · amd64 · bookworm-security
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
- 10.0.0~dfsg-11+deb12u8 · arm64 · bookworm-security
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
[ghostscript-doc]Unknown
Source package: [ghostscript]
Details (4)
- 10.0.0~dfsg-11+deb12u8 · all · bookworm
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
- 10.0.0~dfsg-11+deb12u8 · all · bookworm
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
- 10.0.0~dfsg-11+deb12u8 · all · bookworm-security
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
- 10.0.0~dfsg-11+deb12u8 · all · bookworm-security
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
[ghostscript-x]Unknown
Source package: [ghostscript]
Details (4)
- 10.0.0~dfsg-11+deb12u8 · amd64 · bookworm
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
- 10.0.0~dfsg-11+deb12u8 · arm64 · bookworm
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
- 10.0.0~dfsg-11+deb12u8 · amd64 · bookworm-security
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
- 10.0.0~dfsg-11+deb12u8 · arm64 · bookworm-security
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
[libgs10]Unknown
Source package: [ghostscript]
Details (4)
- 10.0.0~dfsg-11+deb12u8 · amd64 · bookworm
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
- 10.0.0~dfsg-11+deb12u8 · arm64 · bookworm
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
- 10.0.0~dfsg-11+deb12u8 · amd64 · bookworm-security
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
- 10.0.0~dfsg-11+deb12u8 · arm64 · bookworm-security
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
[libgs10-common]Unknown
Source package: [ghostscript]
Details (4)
- 10.0.0~dfsg-11+deb12u8 · all · bookworm
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
- 10.0.0~dfsg-11+deb12u8 · all · bookworm
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
- 10.0.0~dfsg-11+deb12u8 · all · bookworm-security
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
- 10.0.0~dfsg-11+deb12u8 · all · bookworm-security
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
[libgs9-common]Unknown
Source package: [ghostscript]
Details (4)
- 10.0.0~dfsg-11+deb12u8 · all · bookworm
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
- 10.0.0~dfsg-11+deb12u8 · all · bookworm
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
- 10.0.0~dfsg-11+deb12u8 · all · bookworm-security
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
- 10.0.0~dfsg-11+deb12u8 · all · bookworm-security
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
[libgs-common]Unknown
Source package: [ghostscript]
Details (4)
- 10.0.0~dfsg-11+deb12u8 · all · bookworm
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
- 10.0.0~dfsg-11+deb12u8 · all · bookworm
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
- 10.0.0~dfsg-11+deb12u8 · all · bookworm-security
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
- 10.0.0~dfsg-11+deb12u8 · all · bookworm-security
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
[libgs-dev]Unknown
Source package: [ghostscript]
Details (4)
- 10.0.0~dfsg-11+deb12u8 · amd64 · bookworm
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
- 10.0.0~dfsg-11+deb12u8 · arm64 · bookworm
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
- 10.0.0~dfsg-11+deb12u8 · amd64 · bookworm-security
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm
- 10.0.0~dfsg-11+deb12u8 · arm64 · bookworm-security
  Fixed · Fixed: 9.56.0~dfsg-1
  dsa · ghostscript · debian · bookworm

Observed: Oct 23, 2026, 6:23:59 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]