OPENSUSE-SU-2026:12128-1 ghostscript-10.08.0-2.1 on GA media

These are all security issues fixed in the ghostscript-10.08.0-2.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLED15 / SLES15 Security Update : ghostscript (SUSE-SU-2026:4632-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4632-1 advisory. This update for ghostscript fixes the following issue: - CVE-2026-39919: heap-based buffer overflow in the JPEG 2000...

Wordfence Argus Discovers Critical Vulnerability in Ghostscript, the Program That Turns Uploaded PDFs into Thumbnails on Your Server

On September 8, 2026, Artifex released Ghostscript 10.08.0, closing a critical heap buffer overflow that the Wordfence Threat Intelligence team, using Wordfence Argus, discovered and reported sixteen days earlier. It is tracked as CVE-2026-39919 and carries a CVSS score of 9.8 out of 10. A crafte...

Security update for ghostscript

This update for ghostscript fixes the following issue: CVE-2026-39919: heap-based buffer overflow in the JPEG 2000 output adapter allows attackers to cause memory corruption by supplying crafted PDFs bsc1280620. Patch Instructions: To install this SUSE update use the SUSE recommended installation...

SUSE-SU-2026:4632-1 Security update for ghostscript

This update for ghostscript fixes the following issue: - CVE-2026-39919: heap-based buffer overflow in the JPEG 2000 output adapter allows attackers to cause memory corruption by supplying crafted PDFs bsc1280620...

Scan_GhostScript

ScanGhostScript Scan for GhostScript files affected to CVE-2023-36664 PowerShell is self elevating. You can run it directely via context menu...

CVE-2026-108693 ImageMagick through 7.1.2-33 and 6.9.13-58 Uncontrolled Search Path via Ghostscript Delegate

ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscriptEXE that launches gswin64c.exe by bare name when Ghostscript is unregistered. Attackers can plant a malicious gswin64c.exe in the working directory to execute code with...

CVE-2026-108693 ImageMagick through 7.1.2-33 and 6.9.13-58 Uncontrolled Search Path via Ghostscript Delegate

ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscriptEXE that launches gswin64c.exe by bare name when Ghostscript is unregistered. Attackers can plant a malicious gswin64c.exe in the working directory to execute code with...

CVE-2026-108693

The ImageMagick software on Windows versions through 7.1.2-33 and 6.9.13-58 is vulnerable to an uncontrolled search path vulnerability within the NTGhostscriptEXE() function. When Ghostscript is unregistered, the application launches gswin64c.exe using its bare name. This allows an attacker to pl...

[SECURITY] [DSA 6550-1] ghostscript security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6550-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 10, 2026 https://www.debian.org/security/faq -...

MiracleLinux 8 : ghostscript-9.27-18.el8_10 (AXSA:2026-2006:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2006:02 advisory. ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter CVE-2026-39919 Tenable has extracted the preceding description block directly fro...

Security update for ghostscript

This update for ghostscript fixes the following issue: CVE-2026-39919: heap-based buffer overflow in the JPEG 2000 output adapter allows attackers to cause memory corruption by supplying crafted PDFs bsc1280620. Patch Instructions: To install this SUSE update use the SUSE recommended installation...

SUSE-SU-2026:4598-1 Security update for ghostscript

This update for ghostscript fixes the following issue: - CVE-2026-39919: heap-based buffer overflow in the JPEG 2000 output adapter allows attackers to cause memory corruption by supplying crafted PDFs bsc1280620...

AlmaLinux 9.2 [TuxCare] Security Update: ghostscript / ghostscript-doc / ghostscript-gtk / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791463004)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791463004 advisory. - A vulnerability was identified in Artifex Ghostscript up to 10.09.0. Affected is the function type1callsubr of the file...

Rocky Linux 8 [CIQ] Security Update: ghostscript / ghostscript-debuginfo / ghostscript-debugsource / etc (crlsa-2026_76877)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202676877 advisory. ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter CVE-2026-39919 Tenable has extracted the preceding description block directly from the...

EUVD-2026-93668

WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE...

WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE

Summary This was found during a pentest, funded by the NLNnet foundation, conducted by Stefan Vink from Radically Open Security and the only High issue found. WeasyPrint passes fetched image bytes directly to Pillow's generic format dispatcher without restricting the input format. When Ghostscrip...

GHSA-R543-Q48M-4C9J WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE

Summary This was found during a pentest, funded by the NLNnet foundation, conducted by Stefan Vink from Radically Open Security and the only High issue found. WeasyPrint passes fetched image bytes directly to Pillow's generic format dispatcher without restricting the input format. When Ghostscrip...

Server-side Request Forgery (SSRF)

Overview weasyprint is a The Awesome Document Factory Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via EPS image rendering in weasyprint/images.py, which invokes Ghostscript to process EPS images. An attacker who can supply a malicious EPS image to be...

SUSE CVE-2026-101258

A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory corruption in document parsing with disabling of internal path...