What is the CVSS score of CVE-2025-7462?

CVE-2025-7462 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L. EPSS exploitation probability: 0.1%.

Which versions of Ubuntu are affected by CVE-2025-7462?

Organizations using Artifex GhostPDL should be aware of moderate risk from CVE-2025-7462 rated CVSS 4.3. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate CVE-2025-7462?

Within 30 days: Identify affected systems running Artifex GhostPDL and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Ubuntu CVE-2025-7462

EUVD-2025-21205 MEDIUM

Improper Resource Shutdown or Release (CWE-404)

2025-07-12 cna@vuldb.com

Denial Of Service Ubuntu Debian

4.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Ubuntu

LOW

qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 16, 2026 - 08:56 euvd

EUVD-2025-21205

Analysis Generated

Mar 16, 2026 - 08:56 vuln.today

CVE Published

Jul 12, 2025 - 06:15 nvd

MEDIUM 4.3

DescriptionCVE.org

A vulnerability was found in Artifex GhostPDL up to 3989415a5b8e99b9d1b87cc9902bde9b7cdea145. It has been classified as problematic. This affects the function pdf_ferror of the file devices/vector/gdevpdf.c of the component New Output File Open Error Handler. The manipulation leads to null pointer dereference. It is possible to initiate the attack remotely. The identifier of the patch is 619a106ba4c4abed95110f84d5efcd7aee38c7cb. It is recommended to apply a patch to fix this issue.

Analysis

Technical ContextAI

A NULL pointer dereference occurs when the application attempts to use a pointer that has not been initialized or has been set to NULL. This vulnerability is classified as Improper Resource Shutdown or Release (CWE-404).

RemediationAI

Add NULL checks before pointer dereference operations. Use static analysis to identify potential NULL pointer issues. Enable compiler warnings.

Same weakness CWE-404 – Improper Resource Shutdown or Release

View all

CVE-2024-0546 HIGH POC

7.5

CVE-2018-8120 HIGH POC

7.0

CVE-2024-31611 CRITICAL POC

9.1

CVE-2025-1103 HIGH POC

7.1

CVE-2022-4066 HIGH POC

8.2

CVE-2025-5867 HIGH POC

8.0

CVE-2018-8410 HIGH POC

7.8

CVE-2026-38641 HIGH POC

7.5

Same technique Denial Of Service

View all

CVE-2015-5119 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2011-0611 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

CVE-2012-0507 CRITICAL POC

9.8

CVE-2014-1761 HIGH POC

7.8

CVE-2015-5122 CRITICAL POC

9.8

CVE-2011-0609 HIGH POC

7.8

Vendor StatusVendor

Ubuntu

Priority: Low

ghostscript

Release	Status	Version
xenial	needs-triage	-
bionic	needs-triage	-
focal	needs-triage	-
upstream	released	10.05.1~dfsg-2
jammy	released	9.55.0~dfsg1-0ubuntu5.13
noble	released	10.02.1~dfsg1-0ubuntu7.8
plucky	released	10.05.0dfsg1-0ubuntu1.2
questing	released	10.05.0dfsg1-0ubuntu4

USN-7782-1

Debian

Bug #1109270

ghostscript

Release	Status	Fixed Version	Urgency
bullseye	fixed	9.53.3~dfsg-7+deb11u11	-
bullseye (security)	fixed	9.53.3~dfsg-7+deb11u11	-
bookworm, bookworm (security)	fixed	10.0.0~dfsg-11+deb12u8	-
trixie (security), trixie	fixed	10.05.1~dfsg-1+deb13u1	-
forky, sid	fixed	10.06.0~dfsg-3	-
bookworm	fixed	10.0.0~dfsg-11+deb12u8	-
trixie	fixed	10.05.1~dfsg-1+deb13u1	-
(unstable)	fixed	10.05.1~dfsg-2	-

DLA-4330-1 DSA-6024-1

CVE-2025-7462 vulnerability details – vuln.today

Back

Ubuntu CVE-2025-7462

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

Analysis

Technical ContextAI

RemediationAI

Same weakness CWE-404 – Improper Resource Shutdown or Release

Same technique Denial Of Service

Vendor StatusVendor

Ubuntu

Debian

Share

External POC / Exploit Code