VLLM: Untrusted EPS Inputs Can Trigger Denial Of Service Or Ghostscript RCE

🗓️ 29 Oct 2026 04:46:51Reported by Veracode Vulnerability DatabaseType

Untrusted EPS inputs in vLLM ImageMediaIO can trigger DoS or Ghostscript RCE.

Reporter	Title	Published	Views	Family All 220
zdt	Ghostscript Command Execution / Format String Exploit	22 Jul 202400:00	–	zdt
GithubExploit	Exploit for Protection Mechanism Failure in Artifex Ghostscript	29 May 202601:57	–	githubexploit
GithubExploit	Exploit for Protection Mechanism Failure in Artifex Ghostscript	9 Jul 202413:27	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses Pillow which is vulnerable to CVE-2026-54058, CVE-2026-59197, CVE-2026-59198, CVE-2026-59199, CVE-2026-59200, CVE-2026-59203, CVE-2026-59204, CVE-2026-59205	29 Sep 202614:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Operate / IBM Cloud Pak for AIOps	26 Aug 202613:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple memory and Out-of-bounds Read issues in Pillow-manylinux.	22 Oct 202616:14	–	ibm
attackerkb	CVE-2024-29510	3 Jul 202400:00	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : ghostscript, ghostscript-gtk, ghostscript-tools-dvipdf (ALAS2023-2024-664)	22 Jul 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : ghostscript (ALAS-2024-2597)	23 Jul 202400:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0154: ghostscript (ALINUX3-SA-2024:0154)	14 May 202500:00	–	nessus