← Back

Ghostscript

ghostscript

Vendor: Artifex • 129 CVEs

CVEs (129)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-7948
1Artifex
1Ghostscript
May 13, 2026
Apr 19, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Integer overflow in the mark_curve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via a cra...Show more
Integer overflow in the mark_curve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via a crafted PostScript document.Show less
CVE-2016-8602
1Artifex
1Ghostscript
May 13, 2026
Apr 14, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Postscript document that calls...Show more
The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Postscript document that calls .sethalftone5 with an empty operand stack.Show less
CVE-2016-10317
1Artifex
1Ghostscript
May 13, 2026
Apr 3, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
The fill_threshhold_buffer function in base/gxht_thresh.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly hav...Show more
The fill_threshhold_buffer function in base/gxht_thresh.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted PostScript document.Show less
CVE-2017-5951
1Artifex
1Ghostscript
May 13, 2026
Apr 3, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The mem_get_bits_rectangle function in base/gdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.
CVE-2016-10220
1Artifex
1Ghostscript
May 13, 2026
Apr 3, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The gs_makewordimagedevice function in base/gsdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file t...Show more
The gs_makewordimagedevice function in base/gsdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file that is mishandled in the PDF Transparency module.Show less
CVE-2016-10219
1Artifex
1Ghostscript
May 13, 2026
Apr 3, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The intersect function in base/gxfill.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted file.
CVE-2016-10218
1Artifex
1Ghostscript
May 13, 2026
Apr 3, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The pdf14_pop_transparency_group function in base/gdevp14.c in the PDF Transparency module in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference and app...Show more
The pdf14_pop_transparency_group function in base/gdevp14.c in the PDF Transparency module in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.Show less
CVE-2016-10217
1Artifex
1Ghostscript
May 13, 2026
Apr 3, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The pdf14_open function in base/gdevp14.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted file that is mishandled in th...Show more
The pdf14_open function in base/gdevp14.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted file that is mishandled in the color management module.Show less
CVE-2017-7207
1Artifex
1Ghostscript
May 13, 2026
Mar 21, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The mem_get_bits_rectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted PostScript document.