Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter (base/sjpx_openjpeg.c) that allows attackers to cause memory corruption by supplying a crafted PDF containing a JPEG 2000 image with mismatched component subsampling factors. When image components declare different subsampling values, the non-samescale sub-byte-depth output path allocates a row buffer sized for packed output but writes a full byte per output column regardless of bit depth, overflowing the allocation and corrupting internal chunk-allocator metadata to achieve code execution.
CVSS Details
- CVSS 4.0 Base Score: 9.3 (CRITICAL)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ghostscript-docUpgrade ghostscript-tools-dvipdfUpgrade libgsUpgrade ghostscriptUpgrade ghostscript-tools-printingUpgrade ghostscript-tools-fontsUpgrade libgs-develUpgrade ghostscript-x11 | Oct 11, 2026 | Oct 1, 2026 |
| Alpine Linux | — | Upgrade ghostscript | Oct 20, 2026 | Sep 15, 2026 |
| Debian | — | Upgrade ghostscript | Sep 30, 2026 | Sep 15, 2026 |
| Ghostscript | — | Upgrade to Ghostscript version 10.08.0 | Sep 17, 2026 | Sep 15, 2026 |
| Oracle_linux | — | Upgrade ghostscriptUpgrade ghostscript-tools-printingUpgrade ghostscript-tools-fontsUpgrade libgs-develUpgrade ghostscript-x11Upgrade libgsUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-doc | Oct 22, 2026 | Sep 15, 2026 |
| Redhat_linux | — | Upgrade ghostscript-tools-dvipdfUpgrade libgs-debuginfoUpgrade ghostscript-debuginfoUpgrade libgsUpgrade ghostscript-tools-printingUpgrade ghostscript-x11-debuginfoUpgrade libgs-develUpgrade ghostscript-x11Upgrade ghostscript-gtk-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-tools-fontsUpgrade ghostscript-docNo solution existsUpgrade ghostscript | Sep 22, 2026 | Sep 15, 2026 |
| Rocky_linux | — | Upgrade ghostscript-x11-debuginfoUpgrade libgs-develUpgrade ghostscript-debuginfoUpgrade libgsUpgrade ghostscript-x11Upgrade ghostscript-tools-dvipdfUpgrade ghostscript-tools-fontsUpgrade ghostscript-debugsourceUpgrade ghostscriptUpgrade libgs-debuginfoUpgrade ghostscript-tools-printing | Oct 5, 2026 | Oct 2, 2026 |
| Ubuntu | — | Upgrade libgs9Upgrade ghostscriptUpgrade libgs10 | Sep 21, 2026 | Sep 16, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub