AR
Vendor
Artifex
276
CVEs
1
On KEV
2
New 30D
Products
GH9.9
Ghostscript
Artifex
130 CVEs1 on KEV1 new
MU9.8
MuPDF
Artifex
69 CVEs0 on KEV1 new
MU9.8
Mujs
Artifex
30 CVEs0 on KEV0 new
GG8.6
Gpl Ghostscript
Artifex
16 CVEs0 on KEV0 new
GG7.8
Ghostscript Ghostxps
Artifex
9 CVEs0 on KEV0 new
AG7.8
Afpl Ghostscript
Artifex
7 CVEs0 on KEV0 new
JB9.8
Jbig2dec
Artifex
7 CVEs0 on KEV0 new
GF–
Ghostscript Fonts
Artifex
4 CVEs0 on KEV0 new
GS7.8
Gsview
Artifex
3 CVEs0 on KEV0 new
GH7.8
Ghostpcl
Artifex
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-112036 | MU MuPDF Artifex | 4.3 | Oct 19 | Artifex MuPDF Signature Locking pdf-xref.c free_char_list double free |
| CVE-2026-103226 | GH Ghostscript Artifex | 6.3 | Sep 30 | Artifex Ghostscript Pdfwrite gdevpsfx.c type1_callsubr stack-based overflow |
| CVE-2026-92413 | MU MuPDF Artifex | 4.3 | Sep 16 | Artifex MuPDF PDF Xref Loading pdf-stream.c pdf_open_filter null pointer dereference |
| CVE-2025-71382 | MU Mupdf Artifex | 6.5 | Jun 23 | MuPDF < 1.27.0-rc1 Stack Exhaustion DoS via EPUB CSS Rendering |
| CVE-2026-7233 | MU MuPDF Artifex | 6.1 | Apr 28 | Artifex MuPDF CFF Index subset-cff.c fz_subset_cff_for_gids out-of-bounds |
| CVE-2026-40505 | MU Mupdf Artifex | 3.3 | Apr 16 | MuPDF < 1.27 mutool ANSI Injection via Metadata |
| CVE-2026-25556 | MU Mupdf Artifex | 7.5 | Feb 6 | MuPDF versions 1.23.0 through 1.27.0 contain a double-free vulnerability in fz_fill_pixmap_from_display_list() when an exception occurs during display list rendering |
| CVE-2025-55780 | MU Mupdf Artifex | 7.5 | Sep 23 | A null pointer dereference occurs in the function break_word_for_overflow_wrap() in MuPDF 1.26.4 when rendering a malformed EPUB document |
| CVE-2025-59800 | GH Ghostscript Artifex | 5.5 | Sep 22 | In Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdevpdfocr.c has an integer overflow that leads to a heap-based buffer overflow in ocr_line8 |
| CVE-2025-59799 | GH Ghostscript Artifex | 5.5 | Sep 22 | Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfmark_coerce_dest in devices/vector/gdevpdfm.c via a large size value |
| CVE-2025-59798 | GH Ghostscript Artifex | 5.5 | Sep 22 | Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdf_write_cmap in devices/vector/gdevpdtw.c |
| CVE-2025-46206 | MU Mupdf Artifex | 6.5 | Aug 4 | An issue in Artifex mupdf 1.25.6, 1.25.5 allows a remote attacker to cause a denial of service via an infinite recursion in the `mutool clean` utility |
| CVE-2025-48708 | GH Ghostscript Artifex | 3.3 | May 23 | gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case |
| CVE-2025-46646 | GH Ghostscript Artifex | 4.5 | Apr 26 | In Artifex Ghostscript before 10.05.0, decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8 encoding |
| CVE-2025-27837 | GH Ghostscript Artifex | 9.8 | Mar 25 | An issue was discovered in Artifex Ghostscript before 10.05.0 |
| CVE-2025-27836 | GH Ghostscript Artifex | 9.8 | Mar 25 | An issue was discovered in Artifex Ghostscript before 10.05.0 |
| CVE-2025-27835 | GH Ghostscript Artifex | 7.8 | Mar 25 | An issue was discovered in Artifex Ghostscript before 10.05.0 |
| CVE-2025-27834 | GH Ghostscript Artifex | 7.8 | Mar 25 | An issue was discovered in Artifex Ghostscript before 10.05.0 |
| CVE-2025-27833 | GH Ghostscript Artifex | 7.8 | Mar 25 | An issue was discovered in Artifex Ghostscript before 10.05.0 |
| CVE-2025-27832 | GH Ghostscript Artifex | 9.8 | Mar 25 | An issue was discovered in Artifex Ghostscript before 10.05.0 |
| CVE-2025-27831 | GH Ghostscript Artifex | 9.8 | Mar 25 | An issue was discovered in Artifex Ghostscript before 10.05.0 |
| CVE-2025-27830 | GH Ghostscript Artifex | 7.8 | Mar 25 | An issue was discovered in Artifex Ghostscript before 10.05.0 |
| CVE-2024-46657 | MU Mupdf Artifex | 5.5 | Dec 10 | Artifex Software mupdf v1.24.9 was discovered to contain a segmentation fault via the component /tools/pdfextract.c |
| CVE-2024-46956 | GH Ghostscript Artifex | 7.8 | Nov 10 | An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0 |
| CVE-2024-46955 | GH Ghostscript Artifex | 5.5 | Nov 10 | An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0 |
| CVE-2024-46954 | GH Ghostscript Artifex | 7.8 | Nov 10 | An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0 |
| CVE-2024-46953 | GH Ghostscript Artifex | 7.8 | Nov 10 | An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0 |
| CVE-2024-46952 | GH Ghostscript Artifex | 7.8 | Nov 10 | An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0 |
| CVE-2024-46951 | GH Ghostscript Artifex | 7.8 | Nov 10 | An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0 |
| CVE-2024-33871 | GH Ghostscript Artifex | 8.8 | Jul 3 | An issue was discovered in Artifex Ghostscript before 10.03.1 |
| CVE-2024-33870 | GH Ghostscript Artifex | 6.3 | Jul 3 | An issue was discovered in Artifex Ghostscript before 10.03.1 |
| CVE-2024-33869 | GH Ghostscript Artifex | 5.3 | Jul 3 | An issue was discovered in Artifex Ghostscript before 10.03.1 |
| CVE-2024-29511 | GH Ghostscript Artifex | 7.5 | Jul 3 | Artifex Ghostscript before 10.03.1, when Tesseract is used for OCR, has a directory traversal issue that allows arbitrary file reading (and writing of error messages to arbitrary… |
| CVE-2024-29510 | GH Ghostscript Artifex | 6.3 | Jul 3 | Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device |
| CVE-2024-29507 | GH Ghostscript Artifex | 5.4 | Jul 3 | Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters |
| CVE-2024-29509 | GH Ghostscript Artifex | 8.8 | Jul 3 | Artifex Ghostscript before 10.03.0 has a heap-based overflow when PDFPassword (e.g., for runpdf) has a \000 byte in the middle |
| CVE-2024-29508 | GH Ghostscript Artifex | 3.3 | Jul 3 | Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc |
| CVE-2024-29506 | GH Ghostscript Artifex | 8.8 | Jul 3 | Artifex Ghostscript before 10.03.0 has a stack-based buffer overflow in the pdfi_apply_filter() function via a long PDF filter name |
| CVE-2023-52722 | GH Ghostscript Artifex | 5.5 | Apr 28 | An issue was discovered in Artifex Ghostscript before 10.03.1 |
| CVE-2024-24259 | MU Mupdf Artifex | 7.5 | Feb 5 | freeglut through 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddMenuEntry function |
| CVE-2024-24258 | MU Mupdf Artifex | 7.5 | Feb 5 | freeglut 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddSubMenu function |
| CVE-2020-36773 | GH Ghostscript Artifex | 9.8 | Feb 4 | Artifex Ghostscript before 9.53.0 has an out-of-bounds write and use-after-free in devices/vector/gdevtxtw.c (for txtwrite) because a single character code in a PDF document can… |
| CVE-2023-51107 | MU Mupdf Artifex | 7.5 | Dec 26 | A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in functon compute_color() of jquant2.c |
| CVE-2023-51106 | MU Mupdf Artifex | 7.5 | Dec 26 | A floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in function pnm_binary_read_image() of load-pnm.c when fz_colorspace_n returns zero |
| CVE-2023-51105 | MU Mupdf Artifex | 7.5 | Dec 26 | A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function bmp_decompress_rle4() of load-bmp.c |
| CVE-2023-51104 | MU Mupdf Artifex | 7.5 | Dec 26 | A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function pnm_binary_read_image() of load-pnm.c when span equals zero |
| CVE-2023-51103 | MU Mupdf Artifex | 7.5 | Dec 26 | A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in the function fz_new_pixmap_from_float_data() of pixmap.c |
| CVE-2023-46751 | GH Ghostscript Artifex | 7.5 | Dec 6 | An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling… |
| CVE-2023-46361 | JB Jbig2dec Artifex | 6.5 | Oct 31 | Artifex Software jbig2dec v0.20 was discovered to contain a SEGV vulnerability via jbig2_error at /jbig2dec/jbig2.c |
| CVE-2023-31794 | MU Mupdf Artifex | 5.5 | Oct 31 | MuPDF v1.21.1 was discovered to contain an infinite recursion in the component pdf_mark_list_push |
| CVE-2023-43115 | GH Ghostscript Artifex | 8.8 | Sep 18 | In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or… |
| CVE-2023-4042 | GH Ghostscript Artifex | 5.5 | Aug 23 | A flaw was found in ghostscript |
| CVE-2020-26683 | MU Mupdf Artifex | 5.5 | Aug 22 | A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows attackers to obtain sensitive information |
| CVE-2020-21896 | MU Mupdf Artifex | 5.5 | Aug 22 | A Use After Free vulnerability in svg_dev_text_span_as_paths_defs function in source/fitz/svg-device.c in Artifex Software MuPDF 1.16.0 allows remote attackers to cause a denial… |
| CVE-2020-21890 | GH Ghostscript Artifex | 7.8 | Aug 22 | Buffer Overflow vulnerability in clj_media_size function in devices/gdevclj.c in Artifex Ghostscript 9.50 allows remote attackers to cause a denial of service or other unspecified… |
| CVE-2020-21710 | GH Ghostscript Artifex | 5.5 | Aug 22 | A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted… |
| CVE-2023-38560 | GH Ghostscript Artifex | 5.5 | Aug 1 | An integer overflow flaw was found in pcl/pl/plfont.c:418 in pl_glyph_name in ghostscript |
| CVE-2023-38559 | GH Ghostscript Artifex | 5.5 | Aug 1 | A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript |
| CVE-2021-33796 | MU Mujs Artifex | 7.5 | Jul 7 | In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service |
| CVE-2023-36664 | GH Ghostscript Artifex | 7.8 | Jun 25 | Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix) |