A vulnerability was found in Artifex GhostXPS up to 10.5.x. It has been declared as critical. Impacted is the function
xps_unpredict_tiff
of the file xpstiff.c. Executing manipulation of the argument samplesperpixel can lead to stack-based buffer overflow.
This vulnerability appears as CVE-2025-59801. The attack may be performed from remote. There is no available exploit.
It is recommended to upgrade the affected component.