CVE-2026-25797

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the ps coders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a...

Ghostscript p_print_image() Buffer Overflow DoS

The vulnerability of the pprintimage function device/gdevcdj.c in the software for processing, transforming, and generating Ghostscript documents is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

Ghostscript cif_print_page() DoS

The vulnerability of the cifprintpage function device/gdevcif.c in the software suite for processing, transforming, and generating Ghostscript documents is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service...

Ghostscript .tempfile Component Bypass dSAFER Protection File Deletion Unauthorized Access

The vulnerability of the .tempfile component in the software for processing, transforming, and generating Ghostscript documents is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to bypass the dSAFER protection, delete files, or gain unauthorized...

psi/zdevice2.c Stack Overflow

The vulnerability in the code of “psi/zdevice2.c” of the software for processing, transforming, and generating Ghostscript documents is related to the lack of checking available memory on the stack when the output device remains unchanged. Exploiting this vulnerability can allow an attacker to...

psi/zdevice2.c Ghostscript setcolorspace error

The vulnerability in the code of “psi/zdevice2.c” of the software suite for processing, transforming, and generating Ghostscript documents is related to setcolorspace type errors. Exploiting this vulnerability can allow an attacker to bypass established access controls...

Mandrake Linux Security Advisory : kde3 (MDKSA-2003:049-1)

A vulnerability was discovered by the KDE team in the way that KDE uses Ghostscript for processing PostScript and PDF files. A malicious attacker could provide a carefully constructed PDF or PostScript file to an end user via web or mail that could lead to the execution of arbitrary commands as t...

[SECURITY] [DSA 293-1] New kdelibs packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 293-1 [email protected] http://www.debian.org/security/ Martin Schulze April 23rd, 2003 http://www.debian.org/security/faq -...