GH
Product
Ghostscript
On CISA KEVExploited in the wild
130
CVEs
1
On KEV
9.9
Max CVSS
1
New 30D
Severity mix
Critical 12High 56Medium 60Low 2
Watch
Add Ghostscript to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-5951 | 5.5 | Apr 3 | The mem_get_bits_rectangle function in base/gdevmem.c in Artifex Software, Inc Affected: 9.20 |
| CVE-2016-10220 | 5.5 | Apr 3 | The gs_makewordimagedevice function in base/gsdevmem.c in Artifex Software, Inc Affected: 9.20 |
| CVE-2016-10219 | 5.5 | Apr 3 | The intersect function in base/gxfill.c in Artifex Software, Inc Affected: 9.20 |
| CVE-2016-10218 | 5.5 | Apr 3 | The pdf14_pop_transparency_group function in base/gdevp14.c in the PDF Transparency module in Artifex Software, Inc Affected: 9.20 |
| CVE-2016-10217 | 5.5 | Apr 3 | The pdf14_open function in base/gdevp14.c in Artifex Software, Inc Affected: 9.20 |
| CVE-2017-7207 | 5.5 | Mar 21 | The mem_get_bits_rectangle function in Artifex Software, Inc Affected: 9.20 |
| CVE-2024-29507 | 5.4 | Jul 3 | Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters Affected: before 10.03.0 |
| CVE-2024-33869 | 5.3 | Jul 3 | An issue was discovered in Artifex Ghostscript before 10.03.1 Affected: before 10.03.1 |
| CVE-2018-11645 | 5.3 | Jun 1 | psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of… Affected: through 9.20 |
| CVE-2025-46646 | 4.5 | Apr 26 | In Artifex Ghostscript before 10.05.0, decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8 encoding Affected: before 10.05.0 |