Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfmark_coerce_dest in devices/vector/gdevpdfm.c via a large size value.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ghostscript | Dec 5, 2025 | Sep 22, 2025 |
| Amazon Linux Ami 2 | — | Upgrade libgsUpgrade ghostscript-cupsUpgrade libgs-develUpgrade ghostscriptUpgrade ghostscript-docUpgrade ghostscript-debuginfoUpgrade ghostscript-gtk | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade ghostscript-tools-printingUpgrade ghostscript-tools-fontsUpgrade libgs-debuginfoUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-gtkUpgrade ghostscript-debuginfoUpgrade ghostscriptUpgrade ghostscript-docUpgrade ghostscript-tools-dvipdfUpgrade ghostscript-x11Upgrade libgsUpgrade libgs-devel | Oct 16, 2025 | Sep 22, 2025 |
| Debian | — | Upgrade ghostscript | Oct 13, 2025 | Oct 13, 2025 |
| Ghostscript | — | Upgrade to Ghostscript version 10.06.0 | Mar 30, 2026 | Sep 22, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscript-helpUpgrade ghostscript | Jan 15, 2026 | Jan 13, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 22, 2025 |
| Ubuntu | — | Upgrade libgs9Upgrade libgs9 (Ubuntu Pro)Upgrade ghostscriptUpgrade ghostscript (Ubuntu Pro)Upgrade libgs10 | Sep 30, 2025 | Sep 22, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub