Security update for ghostscript

This update for ghostscript fixes the following issue: CVE-2026-39919: heap-based buffer overflow in the JPEG 2000 output adapter allows attackers to cause memory corruption by supplying crafted PDFs bsc1280620. Patch Instructions: To install this SUSE update use the SUSE recommended installation...

SUSE-SU-2026:4598-1 Security update for ghostscript

This update for ghostscript fixes the following issue: - CVE-2026-39919: heap-based buffer overflow in the JPEG 2000 output adapter allows attackers to cause memory corruption by supplying crafted PDFs bsc1280620...

PIL-CVE-2017-8291

Python PIL/Pillow Remote Command Execution GhostButt / CVE-2017-8291 中文版本Chinese version Python PIL Pillow is a popular image processing library for Python. It supports various image formats and provides powerful image manipulation capabilities. The Python image processing module PIL Pillow is...

wongpress

Real Case Exploitation of Buffer Overflow & Format String Vulnerabilities to Gain RCE in Ubuntu Server Related CVEs CVE-2024-2961 : Buffer overflow vulnerability in Glibc iconv function CVE-2024-29510 : Format string vulnerability in Ghostscript PostScript language interpreter 1. Problem...

CVE-2018-16509

CVE-2018-16509 Docker Playground "An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction."...

Rocky Linux 8 [CIQ] Security Update: ghostscript / ghostscript-debuginfo / ghostscript-debugsource / etc (crlsa-2026_76877)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202676877 advisory. ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter CVE-2026-39919 Tenable has extracted the preceding description block directly from the...

AlmaLinux 9.2 [TuxCare] Security Update: ghostscript / ghostscript-doc / ghostscript-gtk / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791463004)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791463004 advisory. - A vulnerability was identified in Artifex Ghostscript up to 10.09.0. Affected is the function type1callsubr of the file...

WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE

Summary This was found during a pentest, funded by the NLNnet foundation, conducted by Stefan Vink from Radically Open Security and the only High issue found. WeasyPrint passes fetched image bytes directly to Pillow's generic format dispatcher without restricting the input format. When Ghostscrip...

GHSA-R543-Q48M-4C9J WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE

Summary This was found during a pentest, funded by the NLNnet foundation, conducted by Stefan Vink from Radically Open Security and the only High issue found. WeasyPrint passes fetched image bytes directly to Pillow's generic format dispatcher without restricting the input format. When Ghostscrip...

EUVD-2026-93668

WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE...

RLSA-2026:76877 Moderate: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fixes: ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter...

ghostscript security update

An update is available for ghostscript. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Ghostscript suite contains utilities for rendering PostScript and PDF...

Linux Distros Unpatched Vulnerability : CVE-2026-106443

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WeasyPrint helps web developers to create PDF documents. Prior to 70.0, the image-loading path in weasyprint/images.py passes fetched image bytes from HTML img...

AlmaLinux 8 : ghostscript (ALSA-2026:76877)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:76877 advisory. ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter CVE-2026-39919 Tenable has extracted the preceding description block directly from the...

CVE-2026-101258

A flaw was found in Ghostscript. When Ghostscript renders a crafted Po...

Oracle Linux 8 : ghostscript (ELSA-2026-76877)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-76877 advisory. 9.27-18 - RHEL-264919 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 output adapter via component subsampling mismatch Tenable has extracted the...

MiracleLinux 9 : ghostscript-9.54.0-19.el9_8.1 (AXSA:2026-1983:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1983:01 advisory. ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter CVE-2026-39919 Tenable has extracted the preceding description block directly fro...

RockyLinux 8 : ghostscript (RLSA-2026:76877)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:76877 advisory. ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter CVE-2026-39919 Tenable has extracted the preceding description block directly from th...

Linux Distros Unpatched Vulnerability : CVE-2026-101258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell...

ghostscript-10.08.0-1.1 on GA media (moderate)

ghostscript-10.08.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11959-1 Rating: moderate Cross-References: CVE-2026-39919 CVSS scores: CVE-2026-39919 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2026-39919 SUSE : 8.5...