Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdf_write_cmap in devices/vector/gdevpdtw.c.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ghostscript | Dec 5, 2025 | Sep 22, 2025 |
| Amazon Linux Ami 2 | — | Upgrade libgs-develUpgrade ghostscript-cupsUpgrade ghostscriptUpgrade ghostscript-docUpgrade ghostscript-gtkUpgrade ghostscript-debuginfoUpgrade libgs | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade libgs-debuginfoUpgrade ghostscriptUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-gtkUpgrade ghostscript-tools-printingUpgrade ghostscript-docUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-x11Upgrade ghostscript-tools-fontsUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-debuginfoUpgrade libgs-develUpgrade libgs | Oct 16, 2025 | Sep 22, 2025 |
| Debian | — | Upgrade ghostscript | Oct 13, 2025 | Oct 13, 2025 |
| Ghostscript | — | Upgrade to Ghostscript version 10.06.0 | Mar 30, 2026 | Sep 22, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscriptUpgrade ghostscript-help | Jan 15, 2026 | Jan 13, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 22, 2025 |
| Ubuntu | — | Upgrade libgs10Upgrade libgs9 (Ubuntu Pro)Upgrade ghostscriptUpgrade ghostscript (Ubuntu Pro)Upgrade libgs9 | Sep 30, 2025 | Sep 22, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub