GH
Product
Ghostscript
On CISA KEVExploited in the wild
130
CVEs
1
On KEV
9.9
Max CVSS
1
New 30D
Severity mix
Critical 12High 56Medium 60Low 2
Watch
Add Ghostscript to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-16295 | 5.5 | Aug 13 | A null pointer dereference vulnerability in clj_media_size() in devices/gdevclj.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a… Affected: before 9.52 |
| CVE-2020-16294 | 5.5 | Aug 13 | A buffer overflow vulnerability in epsc_print_page() in devices/gdevepsc.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a… Affected: before 9.52 |
| CVE-2020-16293 | 5.5 | Aug 13 | A null pointer dereference vulnerability in compose_group_nonknockout_nonblend_isolated_allmask_common() in base/gxblend.c of Artifex Software GhostScript v9.50 allows a remote… Affected: before 9.52 |
| CVE-2020-16292 | 5.5 | Aug 13 | A buffer overflow vulnerability in mj_raster_cmd() in contrib/japanese/gdevmjc.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a… Affected: before 9.52 |
| CVE-2020-16291 | 5.5 | Aug 13 | A buffer overflow vulnerability in contrib/gdevdj9.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file Affected: 9.18 before 9.52 |
| CVE-2020-16290 | 5.5 | Aug 13 | A buffer overflow vulnerability in jetp3852_print_page() in devices/gdev3852.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a… Affected: before 9.52 |
| CVE-2020-16289 | 5.5 | Aug 13 | A buffer overflow vulnerability in cif_print_page() in devices/gdevcif.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted… Affected: before 9.52 |
| CVE-2020-16288 | 5.5 | Aug 13 | A buffer overflow vulnerability in pj_common_print_page() in devices/gdevpjet.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a… Affected: before 9.52 |
| CVE-2020-16287 | 5.5 | Aug 13 | A buffer overflow vulnerability in lprn_is_black() in contrib/lips4/gdevlprn.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a… Affected: before 9.52 |
| CVE-2017-15652 | 5.5 | May 23 | Artifex Ghostscript 9.22 is affected by: Obtain Information Affected: 9.22 |
| CVE-2019-3838 | 5.5 | Mar 25 | It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27 Affected: before 9.27 |
| CVE-2019-3835 | 5.5 | Mar 25 | It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27 Affected: before 9.27 |
| CVE-2018-19478 | 5.5 | Jan 2 | In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when parsing the file Affected: before 9.26 |
| CVE-2018-16542 | 5.5 | Sep 5 | In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use insufficient interpreter stack-size checking during error handling to crash the… Affected: before 9.24 |
| CVE-2018-16541 | 5.5 | Sep 5 | In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect free logic in pagedevice replacement to crash the interpreter Affected: before 9.24 |
| CVE-2018-16539 | 5.5 | Sep 5 | In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect access checking in temp file handling to disclose contents of files on… Affected: before 9.24 |
| CVE-2016-7977 | 5.5 | May 23 | Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently read arbitrary files via the use of the .libfile operator in a… Affected: through 9.20 |
| CVE-2017-8908 | 5.5 | May 12 | The mark_line_tr function in gxscanc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PostScript document Affected: 9.21 |
| CVE-2017-5951 | 5.5 | Apr 3 | The mem_get_bits_rectangle function in base/gdevmem.c in Artifex Software, Inc Affected: 9.20 |
| CVE-2016-10220 | 5.5 | Apr 3 | The gs_makewordimagedevice function in base/gsdevmem.c in Artifex Software, Inc Affected: 9.20 |
| CVE-2016-10219 | 5.5 | Apr 3 | The intersect function in base/gxfill.c in Artifex Software, Inc Affected: 9.20 |
| CVE-2016-10218 | 5.5 | Apr 3 | The pdf14_pop_transparency_group function in base/gdevp14.c in the PDF Transparency module in Artifex Software, Inc Affected: 9.20 |
| CVE-2016-10217 | 5.5 | Apr 3 | The pdf14_open function in base/gdevp14.c in Artifex Software, Inc Affected: 9.20 |
| CVE-2017-7207 | 5.5 | Mar 21 | The mem_get_bits_rectangle function in Artifex Software, Inc Affected: 9.20 |
| CVE-2024-29507 | 5.4 | Jul 3 | Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters Affected: before 10.03.0 |
| CVE-2024-33869 | 5.3 | Jul 3 | An issue was discovered in Artifex Ghostscript before 10.03.1 Affected: before 10.03.1 |
| CVE-2018-11645 | 5.3 | Jun 1 | psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of… Affected: through 9.20 |
| CVE-2025-46646 | 4.5 | Apr 26 | In Artifex Ghostscript before 10.05.0, decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8 encoding Affected: before 10.05.0 |
| CVE-2025-48708 | 3.3 | May 23 | gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case Affected: before 10.05.1 |
| CVE-2024-29508 | 3.3 | Jul 3 | Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc Affected: before 10.03.0 |