GH
Product
Ghostscript
On CISA KEVExploited in the wild
130
CVEs
1
On KEV
9.9
Max CVSS
1
New 30D
Severity mix
Critical 12High 56Medium 60Low 2
Watch
Add Ghostscript to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-7948 | 7.8 | Apr 19 | Integer overflow in the mark_curve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or… Affected: 9.21 |
| CVE-2016-8602 | 7.8 | Apr 14 | The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via… Affected: through 9.20 |
| CVE-2016-10317 | 7.8 | Apr 3 | The fill_threshhold_buffer function in base/gxht_thresh.c in Artifex Software, Inc Affected: 9.20 |
| CVE-2024-29511 | 7.5 | Jul 3 | Artifex Ghostscript before 10.03.1, when Tesseract is used for OCR, has a directory traversal issue that allows arbitrary file reading (and writing of error messages to arbitrary… Affected: before 10.03.1 |
| CVE-2023-46751 | 7.5 | Dec 6 | An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling… Affected: through 10.02.0 |
| CVE-2020-27792 | 7.1 | Aug 19 | A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c file Affected: through 9.50 |