Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdf_write_cmap in devices/vector/gdevpdtw.c.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ghostscript | Dec 5, 2025 | Sep 22, 2025 |
| Amazon Linux Ami 2 | — | Upgrade ghostscript-docUpgrade ghostscriptUpgrade ghostscript-gtkUpgrade libgs-develUpgrade ghostscript-cupsUpgrade ghostscript-debuginfoUpgrade libgs | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade ghostscript-debugsourceUpgrade ghostscript-gtkUpgrade ghostscript-docUpgrade ghostscriptUpgrade libgs-debuginfoUpgrade ghostscript-tools-printingUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-x11-debuginfoUpgrade libgsUpgrade libgs-develUpgrade ghostscript-tools-fontsUpgrade ghostscript-x11Upgrade ghostscript-tools-dvipdfUpgrade ghostscript-debuginfo | Oct 16, 2025 | Sep 22, 2025 |
| Debian | — | Upgrade ghostscript | Oct 13, 2025 | Oct 13, 2025 |
| Ghostscript | — | Upgrade to Ghostscript version 10.06.0 | Mar 30, 2026 | Sep 22, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscriptUpgrade ghostscript-help | Jan 15, 2026 | Jan 13, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 22, 2025 |
| Ubuntu | — | Upgrade ghostscript (Ubuntu Pro)Upgrade libgs9Upgrade ghostscriptUpgrade libgs10Upgrade libgs9 (Ubuntu Pro) | Sep 30, 2025 | Sep 22, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub