Description
In Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdevpdfocr.c has an integer overflow that leads to a heap-based buffer overflow in ocr_line8.
Problem types
CWE-190 Integer Overflow or Wraparound
Product status
Any version
References
bugs.ghostscript.com/show_bug.cgi?id=708602
bugs.ghostscript.com/show_bug.cgi?id=708602
cgit.ghostscript.com/...f0188a2294bc307b8caec876f39412e58350