← Back

Artifex

artifex

257 CVEs • 10 products

Products (10)

Click to collapse
Toggle
Ghostscript
ghostscript
Mupdf
mupdf
Mujs
mujs
Jbig2dec
jbig2dec
Gsview
gsview
Ghostpcl
ghostpcl

CVEs (257)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Artifex
1Mupdf
Jun 17, 2026
Dec 26, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
A floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in function pnm_binary_read_image() of load-pnm.c when fz_colorspace_n returns zero.
1Artifex
1Mupdf
Jun 17, 2026
Dec 26, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function bmp_decompress_rle4() of load-bmp.c.
1Artifex
1Mupdf
Jun 17, 2026
Dec 26, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function pnm_binary_read_image() of load-pnm.c when span equals zero.
1Artifex
1Mupdf
Jun 17, 2026
Dec 26, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in the function fz_new_pixmap_from_float_data() of pixmap.c.
1Artifex
1Ghostscript
Jun 17, 2026
Dec 6, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.
1Artifex
1Jbig2dec
Jun 17, 2026
Oct 31, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Artifex Software jbig2dec v0.20 was discovered to contain a SEGV vulnerability via jbig2_error at /jbig2dec/jbig2.c.
1Artifex
1Mupdf
Jun 17, 2026
Oct 31, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
MuPDF v1.21.1 was discovered to contain an infinite recursion in the component pdf_mark_list_push. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.
2Artifex
Fedoraproject
2Fedora
Ghostscript
Jun 17, 2026
Sep 18, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER h...Show more
In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be specified on a gs command line (the IJS device inherently must execute a command to start the IJS server).Show less
2Artifex
Redhat
9Codeready Linux Builder
Codeready Linux Builder For Arm64Codeready Linux Builder For Ibm Z Systems+6 more
Jun 17, 2026
Aug 23, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A flaw was found in ghostscript. The fix for CVE-2020-16305 in ghostscript was not included in RHSA-2021:1852-06 advisory as it was claimed to be. This issue only affects the ghostscript package as shipped with Red Hat E...Show more
A flaw was found in ghostscript. The fix for CVE-2020-16305 in ghostscript was not included in RHSA-2021:1852-06 advisory as it was claimed to be. This issue only affects the ghostscript package as shipped with Red Hat Enterprise Linux 8.Show less
1Artifex
1Mupdf
Jun 17, 2026
Aug 22, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows attackers to obtain sensitive information.
1Artifex
1Mupdf
Jun 17, 2026
Aug 22, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A Use After Free vulnerability in svg_dev_text_span_as_paths_defs function in source/fitz/svg-device.c in Artifex Software MuPDF 1.16.0 allows remote attackers to cause a denial of service via opening of a crafted PDF fi...Show more
A Use After Free vulnerability in svg_dev_text_span_as_paths_defs function in source/fitz/svg-device.c in Artifex Software MuPDF 1.16.0 allows remote attackers to cause a denial of service via opening of a crafted PDF file.Show less
1Artifex
1Ghostscript
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Buffer Overflow vulnerability in clj_media_size function in devices/gdevclj.c in Artifex Ghostscript 9.50 allows remote attackers to cause a denial of service or other unspecified impact(s) via opening of crafted PDF doc...Show more
Buffer Overflow vulnerability in clj_media_size function in devices/gdevclj.c in Artifex Ghostscript 9.50 allows remote attackers to cause a denial of service or other unspecified impact(s) via opening of crafted PDF document.Show less
1Artifex
1Ghostscript
Jun 17, 2026
Aug 22, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file.
1Artifex
1Ghostscript
Jun 17, 2026
Aug 1, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An integer overflow flaw was found in pcl/pl/plfont.c:418 in pl_glyph_name in ghostscript. This issue may allow a local attacker to cause a denial of service via transforming a crafted PCL file to PDF format.
4Artifex
DebianFedoraproject+1 more
4Debian Linux
Enterprise LinuxFedora+1 more
Jun 23, 2026
Aug 1, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with...Show more
A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs.Show less
1Artifex
1Mujs
Jun 17, 2026
Jul 7, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service.
3Artifex
DebianFedoraproject
3Debian Linux
FedoraGhostscript
Jun 17, 2026
Jun 25, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).
1Artifex
1Mujs
Jun 17, 2026
Apr 17, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Buffer-overflow in jsdtoa.c in Artifex MuJS in versions 1.0.1 to 1.1.1. An integer overflow happens when js_strtod() reads in floating point exponent, which leads to a buffer overflow in the pointer *d.
2Artifex
Debian
2Debian Linux
Ghostscript
Jun 17, 2026
Mar 31, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDe...Show more
In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled to one byte less than full, and one then tries to write an escaped character, two bytes are written.Show less
3Artifex
DebianFedoraproject
3Debian Linux
FedoraMujs
Jun 17, 2026
Nov 23, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
A logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to achieve Remote Code Execution through memory corruption, via the loading of a crafted JavaScript file...Show more
A logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to achieve Remote Code Execution through memory corruption, via the loading of a crafted JavaScript file.Show less