WP < 7.0.4 - Author+ RCE via PDF Upload

Description WordPress does not properly validate PDF files before generating thumbnail when the PHP Imagick extension and GhostScript are used, which could allow users with a role of author and above to upload malicious PDF filer containing php code and lead to RCE...

ghostscript:gs_xps_fuzzer: Heap-buffer-overflow in do_impl_process

Detailed Report: https://oss-fuzz.com/testcase?key=6081465411239936 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsxpsfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7729262ec830 Crash State: doimplprocess...

NewStart CGSL MAIN 6.06 : ghostscript Multiple Vulnerabilities (NS-SA-2026-0055)

The remote NewStart CGSL host, running version MAIN 6.06, has ghostscript packages installed that are affected by multiple vulnerabilities: - A trivial sandbox enabled with the -dSAFER option escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This...

ghostscript:gs_xps_fuzzer: Stack-buffer-overflow in do_impl_process

Detailed Report: https://oss-fuzz.com/testcase?key=6370797451804672 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsxpsfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 8 Crash Address: 0x7aa78b3dbdb0 Crash State: doimplprocess...

Exploit for Cross-site Scripting in Combodo Itop

CVE-2023-36664: Ghostscript Remote Code Execution 취약점 요약...

PYSEC-2026-1615 Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders

Impact In Synapse versions before 1.120.1, enabling the dynamicthumbnails option or processing a specially crafted request could trigger the decoding and thumbnail generation of uncommon image formats, potentially invoking external tools like Ghostscript for processing. This significantly expands...

OESA-2026-2874 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: A vulnerability was found in Artifex GhostPDL up to 3989415a5b8e99b9d1b87cc9902bde9b7cdea145. It has been classifie...

OESA-2026-2873 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: A vulnerability was found in Artifex GhostPDL up to 3989415a5b8e99b9d1b87cc9902bde9b7cdea145. It has been classifie...

ghostscript:gs_device_ljet4_fuzzer: Crash in names_string_ref

Detailed Report: https://oss-fuzz.com/testcase?key=5669830234275840 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceljet4fuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7b2c53aa1da0 Crash State: namesstringref copycspacedi...

ghostscript:gs_device_tiffsep1_fuzzer: Crash in image_simple_expand

Detailed Report: https://oss-fuzz.com/testcase?key=5815169645871104 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicetiffsep1fuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x746f7b6b385f Crash State: imagesimpleexpand...

OESA-2026-2771 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: Artifex Ghostscript before 10.03.0 has a stack-based buffer overflow in the pdfiapplyfilter function via a long PDF...

imagemagick-gs-delegate-hijack-poc

ImageMagick Ghostscript Delegate Search Path PoC This reposit...

base/gp_utf8.c Decode Unauthorized Access

The vulnerability of the decodeutf8 function in the base/gputf8.c software component for processing and generating Ghostscript documents is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow an attacker to gain unauthorized acces...

Exploit for Protection Mechanism Failure in Artifex Ghostscript

Real Case Exploitation of Buffer Overflow & Format String Vuln...

ghostscript:gs_device_tiffsep1_fuzzer: Crash in image_simple_expand

Detailed Report: https://oss-fuzz.com/testcase?key=5185787787542528 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicetiffsep1fuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x794a1935585f Crash State: imagesimpleexpand...

CLSA-2026-1778897873 ghostscript: Fix of CVE-2025-48708

CVE-2025-48708: fix argument sanitization to redact values supplied with '' separator...

openSUSE 16 Security Update : libspectre (openSUSE-SU-2026:20659-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20659-1 advisory. - rebuilds against ghostscript version update. Tenable has extracted the preceding description block directly from the SUSE security advisory. Note that...

OPENSUSE-SU-2026:20659-1 Security update for libspectre

This update for libspectre fixes the following issues: - rebuilds against ghostscript version update...

openSUSE 16 Security Update : ghostscript (openSUSE-SU-2026:20592-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20592-1 advisory. Update to version 10.06.0. Security issues fixed: - CVE-2025-59800: an integer overflow can lead to a heap-based buffer overflow in ocrline8...

OPENSUSE-SU-2026:20592-1 Security update for ghostscript

This update for ghostscript fixes the following issues: Update to version 10.06.0. Security issues fixed: - CVE-2025-59800: an integer overflow can lead to a heap-based buffer overflow in ocrline8 bsc1250355. - CVE-2025-59799: a large size value can cause a stack-based buffer overflow in...