6435 matches found
ANT-2026-QA1CT79B · Ghostscript · heap-buffer-overflow
heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview SECURITY RESEARCH FIRM ANALYSIS Triage and disclosure were performed by Trail of Bits. The writeup below is the document the firm sent to the maintainer. Verdict: true...
CVE-2026-65640: Unrestricted Upload of File with Dangerous Type
WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: Imagick and Ghostscript in use on the server A malicious user with the uploadfiles capability This issue affects all versions of WordPress. Versi...
Unity Linux 20.1070e Security Update: ghostscript (UTSA-2026-099527)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099527 advisory. A vulnerability was found in Artifex GhostPDL up to 3989415a5b8e99b9d1b87cc9902bde9b7cdea145. It has been classified as problematic. This affects the function...
Unity Linux 20.1070e Security Update: ghostscript (UTSA-2026-099516)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099516 advisory. Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure observable in a constructed BaseFont name in the function pdfbasefontalloc. Tenable has...
PT-2026-71974
Name of the Vulnerable Software and Affected Versions WordPress versions prior to 7.0.4 Description An authenticated user with Author level privileges or higher can achieve remote code execution by uploading a malicious Postscript file. This issue occurs when the server utilizes Imagick and...
GHSA-QM8R-Q3H4-C3VW
creationtimestamp| type| source ---|---|--- 2026-08-13 22:43:46+00:00| seen| https://gist.github.com/CaptBoykin/fb932b14c932323583161460666e60da...
WP < 7.0.4 - Author+ RCE via PDF Upload
Description WordPress does not properly validate PDF files before generating thumbnail when the PHP Imagick extension and GhostScript are used, which could allow users with a role of author and above to upload malicious PDF filer containing php code and lead to RCE...
ghostscript:gs_xps_fuzzer: Heap-buffer-overflow in do_impl_process
Detailed Report: https://oss-fuzz.com/testcase?key=6081465411239936 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsxpsfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7729262ec830 Crash State: doimplprocess...
NewStart CGSL MAIN 6.06 : ghostscript Multiple Vulnerabilities (NS-SA-2026-0055)
The remote NewStart CGSL host, running version MAIN 6.06, has ghostscript packages installed that are affected by multiple vulnerabilities: - A trivial sandbox enabled with the -dSAFER option escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This...
ghostscript:gs_xps_fuzzer: Stack-buffer-overflow in do_impl_process
Detailed Report: https://oss-fuzz.com/testcase?key=6370797451804672 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsxpsfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 8 Crash Address: 0x7aa78b3dbdb0 Crash State: doimplprocess...
Exploit for Cross-site Scripting in Combodo Itop
CVE-2023-36664: Ghostscript Remote Code Execution 취약점 요약...
PYSEC-2026-1615 Synapse can be forced to thumbnail unexpected file formats, invoking external, potentially untrustworthy decoders
Impact In Synapse versions before 1.120.1, enabling the dynamicthumbnails option or processing a specially crafted request could trigger the decoding and thumbnail generation of uncommon image formats, potentially invoking external tools like Ghostscript for processing. This significantly expands...
OESA-2026-2873 ghostscript security update
Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: A vulnerability was found in Artifex GhostPDL up to 3989415a5b8e99b9d1b87cc9902bde9b7cdea145. It has been classifie...
OESA-2026-2874 ghostscript security update
Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: A vulnerability was found in Artifex GhostPDL up to 3989415a5b8e99b9d1b87cc9902bde9b7cdea145. It has been classifie...
ghostscript:gs_device_ljet4_fuzzer: Crash in names_string_ref
Detailed Report: https://oss-fuzz.com/testcase?key=5669830234275840 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceljet4fuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7b2c53aa1da0 Crash State: namesstringref copycspacedi...
ghostscript:gs_device_tiffsep1_fuzzer: Crash in image_simple_expand
Detailed Report: https://oss-fuzz.com/testcase?key=5815169645871104 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicetiffsep1fuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x746f7b6b385f Crash State: imagesimpleexpand...
OESA-2026-2771 ghostscript security update
Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: Artifex Ghostscript before 10.03.0 has a stack-based buffer overflow in the pdfiapplyfilter function via a long PDF...
imagemagick-gs-delegate-hijack-poc
ImageMagick Ghostscript Delegate Search Path PoC This reposit...
The vulnerability of the decode_utf8 function in the base/gp_utf8.c software component, which is used for processing, transforming, and generating Ghostscript documents, allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the decodeutf8 function in the base/gputf8.c software component for processing and generating Ghostscript documents is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow an attacker to gain unauthorized acces...