CVE-2017-9610

CVE-2017-9610 describes a heap-based buffer over-read vulnerability in the xps_load_sfnt_name function within Artifex Ghostscript GhostXPS 9.21. This flaw allows remote attackers to trigger a denial of service or potentially other unspecified impacts through a specially crafted document. With a CVSS score of 7.8 (High), it presents a significant risk, requiring user interaction (UI:R) but with low attack complexity (AC:L) and local access (AV:L) to achieve high confidentiality, integrity, and availability impacts (C:H/I:H/A:H). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.