Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfmark_coerce_dest in devices/vector/gdevpdfm.c via a large size value.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ghostscript | Dec 5, 2025 | Sep 22, 2025 |
| Amazon Linux Ami 2 | — | Upgrade ghostscript-debuginfoUpgrade ghostscript-gtkUpgrade libgs-develUpgrade libgsUpgrade ghostscriptUpgrade ghostscript-cupsUpgrade ghostscript-doc | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade libgs-debuginfoUpgrade ghostscript-tools-fontsUpgrade ghostscript-debuginfoUpgrade ghostscript-debugsourceUpgrade ghostscript-tools-printingUpgrade ghostscript-gtkUpgrade ghostscript-x11-debuginfoUpgrade ghostscript-gtk-debuginfoUpgrade libgsUpgrade ghostscriptUpgrade ghostscript-docUpgrade ghostscript-x11Upgrade libgs-develUpgrade ghostscript-tools-dvipdf | Oct 16, 2025 | Sep 22, 2025 |
| Debian | — | Upgrade ghostscript | Oct 13, 2025 | Oct 13, 2025 |
| Ghostscript | — | Upgrade to Ghostscript version 10.06.0 | Mar 30, 2026 | Sep 22, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ghostscriptUpgrade ghostscript-help | Jan 15, 2026 | Jan 13, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 22, 2025 |
| Ubuntu | — | Upgrade libgs9 (Ubuntu Pro)Upgrade libgs9Upgrade ghostscriptUpgrade libgs10Upgrade ghostscript (Ubuntu Pro) | Sep 30, 2025 | Sep 22, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub