The mem_get_bits_rectangle function in base/gdevmem.c in Artifex Software, Inc. Ghostscript allows attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file. Upstream patch: http://git.ghostscript.com/?p=user/chrisl/ghostpdl.git;a=commitdiff;h=bfa6b2ec Upstream bug: https://bugs.ghostscript.com/show_bug.cgi?id=697548
Created ghostscript tracking bugs for this issue: Affects: fedora-all [bug 1441581]