GH
Product
Ghostscript
On CISA KEVExploited in the wild
130
CVEs
1
On KEV
9.9
Max CVSS
1
New 30D
Severity mix
Critical 12High 56Medium 60Low 2
Watch
Add Ghostscript to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-103226 | 6.3 | Sep 30 | Artifex Ghostscript Pdfwrite gdevpsfx.c type1_callsubr stack-based overflow Affected: 10.07 |
| CVE-2024-33870 | 6.3 | Jul 3 | An issue was discovered in Artifex Ghostscript before 10.03.1 Affected: before 10.03.1 |
| CVE-2024-29510 | 6.3 | Jul 3 | Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device Affected: before 10.03.1 |
| CVE-2018-18073 | 6.3 | Oct 15 | Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved execution stack in an error object Affected: through 9.25 |
| CVE-2025-59800 | 5.5 | Sep 22 | In Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdevpdfocr.c has an integer overflow that leads to a heap-based buffer overflow in ocr_line8 Affected: through 10.05.1 |
| CVE-2025-59799 | 5.5 | Sep 22 | Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfmark_coerce_dest in devices/vector/gdevpdfm.c via a large size value Affected: through 10.05.1 |
| CVE-2025-59798 | 5.5 | Sep 22 | Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdf_write_cmap in devices/vector/gdevpdtw.c Affected: through 10.05.1 |
| CVE-2024-46955 | 5.5 | Nov 10 | An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0 Affected: before 10.04.0 |
| CVE-2023-52722 | 5.5 | Apr 28 | An issue was discovered in Artifex Ghostscript before 10.03.1 Affected: before 10.03.1 |
| CVE-2023-4042 | 5.5 | Aug 23 | A flaw was found in ghostscript Affected: before 9.51 |
| CVE-2020-21710 | 5.5 | Aug 22 | A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted… Affected: 9.50 |
| CVE-2023-38560 | 5.5 | Aug 1 | An integer overflow flaw was found in pcl/pl/plfont.c:418 in pl_glyph_name in ghostscript Affected: All versions, or not specified |
| CVE-2023-38559 | 5.5 | Aug 1 | A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript Affected: before 10.02.0 |
| CVE-2022-2085 | 5.5 | Jun 16 | A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory Affected: 9.55.0 |
| CVE-2021-45944 | 5.5 | Jan 1 | Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampled_data_sample (called from sampled_data_continue and interp) Affected: 9.50 through 9.53.3 |
| CVE-2021-45949 | 5.5 | Dec 31 | Ghostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampled_data_finish (called from sampled_data_continue and interp) Affected: 9.50 through 9.54.0 |
| CVE-2020-14373 | 5.5 | Sep 3 | A use after free was found in igc_reloc_struct_ptr() of psi/igc.c of ghostscript-9.25 Affected: 9.25 |
| CVE-2020-17538 | 5.5 | Aug 13 | A buffer overflow vulnerability in GetNumSameData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9.18 to v9.50 allows a remote attacker to cause a denial of… Affected: 9.18 before 9.52 |
| CVE-2020-16310 | 5.5 | Aug 13 | A division by zero vulnerability in dot24_print_page() in devices/gdevdm24.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a… Affected: 9.50 |
| CVE-2020-16309 | 5.5 | Aug 13 | A buffer overflow vulnerability in lxm5700m_print_page() in devices/gdevlxm.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a… Affected: 9.50 |
| CVE-2020-16308 | 5.5 | Aug 13 | A buffer overflow vulnerability in p_print_image() in devices/gdevcdj.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted… Affected: before 9.52; 9.50 |
| CVE-2020-16307 | 5.5 | Aug 13 | A null pointer dereference vulnerability in devices/vector/gdevtxtw.c and psi/zbfont.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service… Affected: 9.50 |
| CVE-2020-16306 | 5.5 | Aug 13 | A null pointer dereference vulnerability in devices/gdevtsep.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted postscript… Affected: 9.50 |
| CVE-2020-16305 | 5.5 | Aug 13 | A buffer overflow vulnerability in pcx_write_rle() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a… Affected: 9.50 |
| CVE-2020-16304 | 5.5 | Aug 13 | A buffer overflow vulnerability in image_render_color_thresh() in base/gxicolor.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote attacker to escalate privileges… Affected: 9.18 through 9.52 |
| CVE-2020-16302 | 5.5 | Aug 13 | A buffer overflow vulnerability in jetp3852_print_page() in devices/gdev3852.c of Artifex Software GhostScript v9.50 allows a remote attacker to escalate privileges via a crafted… Affected: 9.50 |
| CVE-2020-16301 | 5.5 | Aug 13 | A buffer overflow vulnerability in okiibm_print_page1() in devices/gdevokii.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a… Affected: before 9.52 |
| CVE-2020-16300 | 5.5 | Aug 13 | A buffer overflow vulnerability in tiff12_print_page() in devices/gdevtfnx.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a… Affected: before 9.52 |
| CVE-2020-16299 | 5.5 | Aug 13 | A Division by Zero vulnerability in bj10v_print_page() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service… Affected: before 9.52 |
| CVE-2020-16298 | 5.5 | Aug 13 | A buffer overflow vulnerability in mj_color_correct() in contrib/japanese/gdevmjc.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via… Affected: before 9.52 |
| CVE-2020-16297 | 5.5 | Aug 13 | A buffer overflow vulnerability in FloydSteinbergDitheringC() in contrib/gdevbjca.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote attacker to cause a denial of… Affected: 9.18 before 9.52 |
| CVE-2020-16296 | 5.5 | Aug 13 | A buffer overflow vulnerability in GetNumWrongData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9.18 to v9.50 allows a remote attacker to cause a denial of… Affected: 9.18 before 9.52 |
| CVE-2020-16295 | 5.5 | Aug 13 | A null pointer dereference vulnerability in clj_media_size() in devices/gdevclj.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a… Affected: before 9.52 |
| CVE-2020-16294 | 5.5 | Aug 13 | A buffer overflow vulnerability in epsc_print_page() in devices/gdevepsc.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a… Affected: before 9.52 |
| CVE-2020-16293 | 5.5 | Aug 13 | A null pointer dereference vulnerability in compose_group_nonknockout_nonblend_isolated_allmask_common() in base/gxblend.c of Artifex Software GhostScript v9.50 allows a remote… Affected: before 9.52 |
| CVE-2020-16292 | 5.5 | Aug 13 | A buffer overflow vulnerability in mj_raster_cmd() in contrib/japanese/gdevmjc.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a… Affected: before 9.52 |
| CVE-2020-16291 | 5.5 | Aug 13 | A buffer overflow vulnerability in contrib/gdevdj9.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file Affected: 9.18 before 9.52 |
| CVE-2020-16290 | 5.5 | Aug 13 | A buffer overflow vulnerability in jetp3852_print_page() in devices/gdev3852.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a… Affected: before 9.52 |
| CVE-2020-16289 | 5.5 | Aug 13 | A buffer overflow vulnerability in cif_print_page() in devices/gdevcif.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted… Affected: before 9.52 |
| CVE-2020-16288 | 5.5 | Aug 13 | A buffer overflow vulnerability in pj_common_print_page() in devices/gdevpjet.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a… Affected: before 9.52 |
| CVE-2020-16287 | 5.5 | Aug 13 | A buffer overflow vulnerability in lprn_is_black() in contrib/lips4/gdevlprn.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a… Affected: before 9.52 |
| CVE-2017-15652 | 5.5 | May 23 | Artifex Ghostscript 9.22 is affected by: Obtain Information Affected: 9.22 |
| CVE-2019-3838 | 5.5 | Mar 25 | It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27 Affected: before 9.27 |
| CVE-2019-3835 | 5.5 | Mar 25 | It was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27 Affected: before 9.27 |
| CVE-2018-19478 | 5.5 | Jan 2 | In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when parsing the file Affected: before 9.26 |
| CVE-2018-16542 | 5.5 | Sep 5 | In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use insufficient interpreter stack-size checking during error handling to crash the… Affected: before 9.24 |
| CVE-2018-16541 | 5.5 | Sep 5 | In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect free logic in pagedevice replacement to crash the interpreter Affected: before 9.24 |
| CVE-2018-16539 | 5.5 | Sep 5 | In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect access checking in temp file handling to disclose contents of files on… Affected: before 9.24 |
| CVE-2016-7977 | 5.5 | May 23 | Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently read arbitrary files via the use of the .libfile operator in a… Affected: through 9.20 |
| CVE-2017-8908 | 5.5 | May 12 | The mark_line_tr function in gxscanc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PostScript document Affected: 9.21 |