Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.5

Ghostscript could let attackers take control

published 4 days ago
Summary

The Ghostscript program has a coding mistake that can overflow memory when printing certain files. This could allow a malicious user to cause the software to behave unexpectedly or potentially run their own code. Update Ghostscript to the latest version or apply the vendor's patch as soon as possible.

What to do
  • Update cleanstart ghostscript to version 9.51-r0.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart ghostscript < 9.51-r0
Fix: upgrade to 9.51-r0
Original advisory text
buffer overflow vulnerability in epsc_print_page() in devices/gdevepsc
Security vulnerability affects the ghostscript package. A buffer overflow vulnerability in epsc_print_page() in devices/gdevepsc.
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.5 Medium
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
Track software like this
Free during beta