An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforall can lead to arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade ghostscript-tools-dvipdfUpgrade libgsUpgrade ghostscript-docUpgrade ghostscriptUpgrade ghostscript-tools-printingUpgrade ghostscript-tools-fontsUpgrade libgs-develUpgrade ghostscript-x11 | May 6, 2025 | Nov 10, 2024 |
| Amazon Linux Ami 2 | — | Upgrade libgsUpgrade ghostscript-docUpgrade ghostscript-gtkUpgrade ghostscriptUpgrade ghostscript-cupsUpgrade libgs-develUpgrade ghostscript-debuginfo | Dec 20, 2024 | Nov 10, 2024 |
| Amazon_linux | — | Upgrade ghostscript | May 13, 2025 | Nov 10, 2024 |
| Amazon_linux_2023 | — | Upgrade ghostscript-tools-fontsUpgrade libgs-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-tools-printingUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-gtkUpgrade ghostscript-debuginfoUpgrade ghostscript-docUpgrade ghostscriptUpgrade libgs-develUpgrade ghostscript-x11Upgrade libgsUpgrade ghostscript-tools-dvipdf | Feb 17, 2025 | Nov 10, 2024 |
| Debian | — | Upgrade ghostscript | Nov 18, 2024 | Nov 10, 2024 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Jan 24, 2025 | Nov 10, 2024 |
| Ghostscript | — | Upgrade to Ghostscript version 10.04.0 | Nov 19, 2024 | Nov 10, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscriptUpgrade ghostscript-help | Jan 14, 2025 | Nov 10, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade ghostscriptUpgrade ghostscript-help | Jan 15, 2025 | Nov 10, 2024 |
| Oracle_linux | — | Upgrade ghostscript-x11Upgrade ghostscriptUpgrade ghostscript-tools-printingUpgrade ghostscript-tools-fontsUpgrade ghostscript-docUpgrade ghostscript-tools-dvipdfUpgrade libgs-develUpgrade libgs | May 1, 2025 | Nov 10, 2024 |
| Redhat_linux | — | Upgrade libgs-develUpgrade ghostscript-x11Upgrade ghostscriptNo solution existsUpgrade ghostscript-debugsourceUpgrade libgsUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-docUpgrade libgs-debuginfoUpgrade ghostscript-tools-printingUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-debuginfoUpgrade ghostscript-tools-fonts | May 1, 2025 | Nov 10, 2024 |
| Rocky_linux | — | Upgrade ghostscript-debugsourceUpgrade ghostscript-x11Upgrade ghostscriptUpgrade libgs-develUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-tools-fontsUpgrade libgs-debuginfoUpgrade ghostscript-tools-printingUpgrade libgsUpgrade ghostscript-debuginfo | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade ghostscript-x11Upgrade ghostscriptUpgrade ghostscript-devel | Dec 5, 2025 | May 1, 2025 |
| Ubuntu | — | Upgrade libgs10Upgrade ghostscriptUpgrade libgs9Upgrade libgs9 (Ubuntu Pro) | Nov 13, 2024 | Nov 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub