High severity · published Sep 5, 2018
CVE-2018-16510
An issue was discovered in Artifex Ghostscript before 9.24
7.8
CVSS
1.7%
EPSS
No
On KEV
Description
An issue was discovered in Artifex Ghostscript before 9.24. Incorrect exec stack handling in the "CS" and "SC" PDF primitives could be used by remote attackers able to supply crafted PDFs to crash the interpreter or possibly have unspecified other impact.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GH
Ghostscript · Artifex
before 9.24 · source: NVD
GG
Gpl Ghostscript · Artifex
before 9.26 · source: NVD
UL
Ubuntu Linux · Canonical
14.04; 16.04; 18.04 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-16510
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-16510
git.ghostscript.com
http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=ea735ba37dc0fd5f5622d031830b9a559dec1cc9
Issue Tracking
http://openwall.com/lists/oss-security/2018/08/27/4
Issue Tracking
https://bugs.ghostscript.com/show_bug.cgi?id=699671
Third Party Advisory
https://security.gentoo.org/glsa/201811-12
Third Party Advisory
https://usn.ubuntu.com/3768-1/
Third Party Advisory
https://usn.ubuntu.com/3773-1/
More from Ghostscript
7.8
CVE-2017-8291
Artifex Ghostscript Type Confusion Vulnerability
9.9
CVE-2021-3781
A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command
9.8
CVE-2025-27837
An issue was discovered in Artifex Ghostscript before 10.05.0
9.8
CVE-2025-27836
An issue was discovered in Artifex Ghostscript before 10.05.0
9.8
CVE-2025-27832
An issue was discovered in Artifex Ghostscript before 10.05.0