Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfmark_coerce_dest in devices/vector/gdevpdfm.c via a large size value.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ghostscript | Dec 5, 2025 | Sep 22, 2025 |
| Amazon Linux Ami 2 | — | Upgrade ghostscript-debuginfoUpgrade ghostscript-gtkUpgrade ghostscriptUpgrade libgs-develUpgrade ghostscript-cupsUpgrade libgsUpgrade ghostscript-doc | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade libgs-develUpgrade ghostscriptUpgrade ghostscript-docUpgrade ghostscript-x11Upgrade ghostscript-tools-dvipdfUpgrade libgsUpgrade libgs-debuginfoUpgrade ghostscript-gtk-debuginfoUpgrade ghostscript-gtkUpgrade ghostscript-debuginfoUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-tools-fontsUpgrade ghostscript-tools-printing | Oct 16, 2025 | Sep 22, 2025 |
| Debian | — | Upgrade ghostscript | Oct 13, 2025 | Oct 13, 2025 |
| Ghostscript | — | Upgrade to Ghostscript version 10.06.0 | Mar 30, 2026 | Sep 22, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscriptUpgrade ghostscript-help | Jan 15, 2026 | Jan 13, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 22, 2025 |
| Ubuntu | — | Upgrade libgs9Upgrade libgs9 (Ubuntu Pro)Upgrade ghostscript (Ubuntu Pro)Upgrade ghostscriptUpgrade libgs10 | Sep 30, 2025 | Sep 22, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub