Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdf_write_cmap in devices/vector/gdevpdtw.c.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ghostscript | Dec 5, 2025 | Sep 22, 2025 |
| Amazon Linux Ami 2 | — | Upgrade ghostscript-debuginfoUpgrade libgsUpgrade ghostscriptUpgrade libgs-develUpgrade ghostscript-gtkUpgrade ghostscript-cupsUpgrade ghostscript-doc | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade ghostscript-docUpgrade ghostscriptUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-tools-printingUpgrade libgs-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-gtkUpgrade ghostscript-tools-fontsUpgrade libgs-develUpgrade libgsUpgrade ghostscript-debuginfoUpgrade ghostscript-x11Upgrade ghostscript-tools-dvipdf | Oct 16, 2025 | Sep 22, 2025 |
| Debian | — | Upgrade ghostscript | Oct 13, 2025 | Oct 13, 2025 |
| Ghostscript | — | Upgrade to Ghostscript version 10.06.0 | Mar 30, 2026 | Sep 22, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscript-helpUpgrade ghostscript | Jan 15, 2026 | Jan 13, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 22, 2025 |
| Ubuntu | — | Upgrade libgs9 (Ubuntu Pro)Upgrade libgs10Upgrade ghostscriptUpgrade libgs9Upgrade ghostscript (Ubuntu Pro) | Sep 30, 2025 | Sep 22, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub