CVE-2018-16510

CVE-2018-16510 refers to Ghostscript before 9.24, where an issue in the PDF primitives CS and SC incorrectly handled the exec stack. This could allow remote attackers to crash the interpreter or cause unspecified other impact by supplying crafted PDFs. The connected advisories confirm remediation...

CVE-2018-16539

CVE-2018-16539 affects Artifex Ghostscript (prior to 9.24). A crafted PostScript file could bypass access checks in temp file handling, allowing disclosure of files on the system. Multiple advisories (Debian, Red Hat/CentOS, Gentoo, Fedora, IBM PowerKVM, Amazon Linux) document this vulnerability ...

CVE-2025-46646

CVE-2025-46646 affects Artifex Ghostscript prior to 10.05.0, where decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8 encodings. This issue is linked to an incomplete fix for CVE-2024-46954. Affected products include Ghostscript releases before 10.05.0; multiple advisories reference upgrades...

CVE-2024-46953

CVE-2024-46953 concerns Ghostscript before 10.04.0, where an integer overflow while parsing the output filename format string in base/gsdevice.c can cause path truncation, enabling path traversal and potential code execution. Affected: Ghostscript PS/PDF interpreter, notably ghostpdl-10.04.0 and ...

CVE-2025-27830

A buffer overflow vulnerability exists in Artifex Ghostscript before version 10.05.0 . The issue is caused by buffer copying without sufficient input size checks during the serialization of DollarBlend in a font, specifically affecting the base/write_t1.c and psi/zfapi.c files. Exploitation of th...

CVE-2024-29506

Artifex Ghostscript is affected by CVE-2024-29506: Ghostscript before 10.03.0 contains a stack-based buffer overflow in pdfi_apply_filter() triggered by a long PDF filter name. Impact, per available references, includes potential memory corruption with high-severity risk; exploitation details are...

CVE-2025-27836

Artifex Ghostscript versions prior to 10.05.0 are vulnerable to a Print buffer overflow in the BJ10V device, specifically located in contrib/japanese/gdev10v.c . This issue allows for potential exploitation via network vectors with low complexity and no required privileges, potentially leading to...

CVE-2025-27831

Artifex Ghostscript versions prior to 10.05.0 are vulnerable to a text buffer overflow in the DOCXWRITE and TXTWRITE devices. The flaw exists in devices/vector/doc_common.c and can be triggered by providing long characters . This vulnerability has been identified in various distributions, includi...

CVE-2025-48708

The CVE-2025-48708 entry is confirmed to affect Artifex Ghostscript and is not a placeholder. The issue is in gs_lib_ctx_stash_sanitized_arg (base/gslibctx.c) before 10.05.1, where argument sanitization for the # case is missing, allowing a created PDF to include its password in cleartext. Affect...

CVE-2018-16585

Artifex Ghostscript prior to 9.24 is affected by CVE-2018-16585 where the .setdistillerkeys PostScript command is accepted despite not being intended for document processing. This leads to memory corruption, enabling remote attackers able to supply crafted PostScript to crash the interpreter or p...

CVE-2024-46952

CVE-2024-46952 affects Artifex Ghostscript before 10.04.0. The issue is a buffer overflow in the PDF processing path, specifically in pdf/pdf_xref.c during handling of a PDF XRef stream (related to W array values). The vulnerability is triggered when processing certain PDF cross-reference streams...

CVE-2025-27837

A vulnerability exists in Artifex Ghostscript versions prior to 10.05.0 due to an incorrect path name limitation in the gp_open_scratch_file_impl() function. Specifically, the issue involves the base/gp_mswin.c and base/winrtsup.cpp files, where a truncated path containing invalid UTF-8 character...

CVE-2018-16513

CVE-2018-16513 affects Artifex Ghostscript prior to 9.24. A crafted PostScript file can trigger a type confusion in the setcolor function, potentially crashing the Ghostscript interpreter or causing unspecified other impact. Mitigation documented across multiple sources is to upgrade Ghostscript ...

CVE-2025-27833

Artifex Ghostscript versions prior to 10.05.0 are vulnerable to a buffer overflow (CWE-120) occurring when processing a long TTF font name in the pdf/pdf_fmap.c file. This flaw is related to a numerical overflow condition and can be exploited to cause a service failure . For users of the GPL Ghos...

CVE-2024-46954

Ghostscript before 10.05.0 is affected by decode_utf8() in base/gp_utf8.c mishandling of overlong UTF-8 encoding, enabling a potential directory traversal (CVE-2024-46954). Connected advisories corroborate the issue exists across multiple Linux distributions and note the fix requires upgrading Gh...

CVE-2024-29509

CVE-2024-29509 affects Artifex Ghostscript before 10.03.0, where a heap-based overflow occurs when PDFPassword (e.g., for runpdf) contains a embedded NUL byte in the middle. This can lead to corruption or potential code execution as described in public disclosures. The vulnerability is attributed...

CVE-2024-46955

CVE-2024-46955 : Ghostscript contains an out-of-bounds read in psi/zcolor.c when reading color in Indexed color space, before version 10.04.0. Impact is a local issue with user interaction required (per CVSS details: AV:L, UI:R, Availability:A:H). The fix is indicated by the ghostpdl-10.04.0 comm...

CVE-2024-29507

Artifex Ghostscript versions prior to 10.03.0 are susceptible to a stack-based buffer overflow triggered via the CIDFSubstPath and CIDFSubstFont parameters. This vulnerability allows an attacker to potentially cause memory corruption or gain unauthorized access to protected information. Exploitat...

CVE-2025-27834

Artifex Ghostscript versions prior to 10.05.0 are vulnerable to a buffer overflow in the pdf/pdf_func.c component. The root cause is an unsigned int overflow triggered by an oversized Type 4 function definition within a PDF document, which causes the allocated buffer to be smaller than required. ...