CVE-2026-103226: Stack-based Buffer Overflow

A vulnerability was identified in Artifex Ghostscript up to 10.09.0. Affected is the function type1callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite. The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicl...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-buffer-overflow in pdf_save_viewer_state

Detailed Report: https://oss-fuzz.com/testcase?key=4663515200159744 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x7e696fc39c68 Crash State:...

ghostscript:gs_device_pdfwrite_fuzzer: Crash in gs_cmap_ToUnicode_add_pair

Detailed Report: https://oss-fuzz.com/testcase?key=6289911895621632 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x75b6b0276558 Crash State: gscmapToUnicodeaddpair...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-use-after-free in gc_trace

Detailed Report: https://oss-fuzz.com/testcase?key=5789252277567488 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x5310000b0808 Crash State: gctrace...

ghostscript:gs_device_pdfwrite_opts_fuzzer: Global-buffer-overflow in zpeekstring

Detailed Report: https://oss-fuzz.com/testcase?key=6451102803623936 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwriteoptsfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Global-buffer-overflow READ 8 Crash Address: 0x56096c4c2460 Crash State:...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-buffer-overflow in pdf_save_viewer_state

Detailed Report: https://oss-fuzz.com/testcase?key=4871770673840128 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x52900005ec78 Crash State:...

ghostscript:gs_device_pdfwrite_opts_fuzzer: Crash in chunk_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=4843874783657984 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwriteoptsfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000045e066 Crash State: chunkfreeobject...

ghostscript:gs_device_pdfwrite_opts_fuzzer: Crash in chunk_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=4653346041430016 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwriteoptsfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000045e066 Crash State: chunkfreeobject...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-buffer-overflow in Calc_Length

Detailed Report: https://oss-fuzz.com/testcase?key=6362513849319424 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62a0002e79e0 Crash State: CalcLengt...

SUSE CVE-2018-10194

The settextdistance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impac...

ghostscript:gs_device_pdfwrite_opts_fuzzer: Crash in Ins_MSIRP

Detailed Report: https://oss-fuzz.com/testcase?key=4886761398730752 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwriteoptsfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62a000404d20 Crash State: InsMSIRP RunIns...

ghostscript:gs_device_pdfwrite_fuzzer: Stack-use-after-return in gs_type2_interpret

Detailed Report: https://oss-fuzz.com/testcase?key=6155911668563968 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-use-after-return READ 4 Crash Address: 0x7fbfaf462bd4 Crash State:...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-use-after-free in s_file_write_flush

Detailed Report: https://oss-fuzz.com/testcase?key=6661891795058688 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x614000027d98 Crash State:...

ghostscript:gs_device_pdfwrite_fuzzer: Segv on unknown address in deflate

Detailed Report: https://oss-fuzz.com/testcase?key=6444829516627968 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: deflate szlibEprocess...

ghostscript:gs_device_pdfwrite_fuzzer: Stack-buffer-underflow in gs_type2_interpret

Detailed Report: https://oss-fuzz.com/testcase?key=5883482550697984 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-underflow READ 4 Crash Address: 0x7fc19708641c Crash State:...

ghostscript:gs_device_pdfwrite_fuzzer: Crash in names_index_ref

Detailed Report: https://oss-fuzz.com/testcase?key=4880033168097280 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62f004020468 Crash State: namesindexref...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-buffer-overflow in Ins_NPUSHW

Detailed Report: https://oss-fuzz.com/testcase?key=5279742755995648 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x631000128830 Crash State: InsNPUSHW...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-buffer-overflow in Ins_NPUSHB

Detailed Report: https://oss-fuzz.com/testcase?key=5394027238785024 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x625000090d68 Crash State: InsNPUSHB...

ghostscript:gs_device_pdfwrite_fuzzer: Heap-buffer-overflow in gs_type2_interpret

Detailed Report: https://oss-fuzz.com/testcase?key=4716377952354304 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x625000171898 Crash State:...

ghostscript:gs_device_pdfwrite_fuzzer: Stack-buffer-overflow in gs_glyph_data_from_bytes

Detailed Report: https://oss-fuzz.com/testcase?key=5535574097788928 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 8 Crash Address: 0x7fffa255c540 Crash State:...