CVE-2026-101258
Ghostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-free
A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory corruption in document parsing with disabling of internal path access controls at runtime. An attacker can deliver the document directly or through formats that delegate rendering to Ghostscript (for example EPS import or print conversion workflows). Successful exploitation can compromise confidentiality, integrity, and availability of data accessible to the process running Ghostscript.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Ghostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-free
A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory corruption in document parsing with disabling of internal path access controls at runtime. An attacker can deliver the document directly or through formats that delegate rendering to Ghostscript (for example EPS import or print conversion workflows). Successful exploitation can compromise confidentiality, integrity, and availability of data accessible to the process running Ghostscript.
- Record
CVE-2026-101258- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-04
EUVDEUVD-2026-93982
A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory corruption in document parsing with disabling of internal path access controls at runtime. An attacker can deliver the document directly or through formats that delegate rendering to Ghostscript (for example EPS import or print conversion workflows). Successful exploitation can compromise confidentiality, integrity, and availability of data accessible to the process running Ghostscript.
- Record
EUVD-2026-93982- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-04
GitHub AdvisoriesGHSA-g96p-c3cq-wp28
A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document,...
A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory corruption in document parsing with disabling of internal path access controls at runtime. An attacker can deliver the document directly or through formats that delegate rendering to Ghostscript (for example EPS import or print conversion workflows). Successful exploitation can compromise confidentiality, integrity, and availability of data accessible to the process running Ghostscript.
- Record
GHSA-g96p-c3cq-wp28- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
NVD
A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory corruption in document parsing with disabling of internal path access controls at runtime. An attacker can deliver the document directly or through formats that delegate rendering to Ghostscript (for example EPS import or print conversion workflows). Successful exploitation can compromise confidentiality, integrity, and availability of data accessible to the process running Ghostscript.
- Record
CVE-2026-101258- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-04
OSVBELL-CVE-2026-101258
- Record
BELL-CVE-2026-101258- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-04
OSVDEBIAN-CVE-2026-101258
A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory corruption in document parsing with disabling of internal path access controls at runtime. An attacker can deliver the document directly or through formats that delegate rendering to Ghostscript (for example EPS import or print conversion workflows). Successful exploitation can compromise confidentiality, integrity, and availability of data accessible to the process running Ghostscript.
- Record
DEBIAN-CVE-2026-101258- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-05
Show 18 moreShow less
OSVRHSA-2026:83551
Red Hat Security Advisory: ghostscript security update
- Record
RHSA-2026:83551- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:83552
Red Hat Security Advisory: ghostscript security update
- Record
RHSA-2026:83552- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:83553
Red Hat Security Advisory: ghostscript security update
- Record
RHSA-2026:83553- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2026:83551
Important: ghostscript security update
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.
Security Fix(es):
-
ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (CVE-2026-101258)
-
ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data (CVE-2026-103226)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:83551- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2026:83552
Important: ghostscript security update
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.
Security Fix(es):
-
ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (CVE-2026-101258)
-
ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data (CVE-2026-103226)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:83552- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2026:83553
Important: ghostscript security update
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.
Security Fix(es):
-
ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (CVE-2026-101258)
-
ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data (CVE-2026-103226)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:83553- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-101258
A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory corruption in document parsing with disabling of internal path access controls at runtime. An attacker can deliver the document directly or through formats that delegate rendering to Ghostscript (for example EPS import or print conversion workflows). Successful exploitation can compromise confidentiality, integrity, and availability of data accessible to the process running Ghostscript.
- Record
UBUNTU-CVE-2026-101258- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVALSA-2026:83551 No score
Important: ghostscript security update
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.
Security Fix(es):
- ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (CVE-2026-101258)
- ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data (CVE-2026-103226)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:83551- Updated
- 2026-11-02
OSVALSA-2026:83552 No score
Important: ghostscript security update
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.
Security Fix(es):
- ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (CVE-2026-101258)
- ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data (CVE-2026-103226)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:83552- Updated
- 2026-11-02
OSVALSA-2026:83553 No score
Important: ghostscript security update
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.
Security Fix(es):
- ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (CVE-2026-101258)
- ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data (CVE-2026-103226)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:83553- Updated
- 2026-11-02
OSVCLSA-2026-1792809195 No score
ghostscript: Fix of CVE-2026-101258
- CVE-2026-101258: fix -dSAFER bypass via shading function OOB write and procedural filter use-after-free
- Record
CLSA-2026-1792809195- Updated
- 2026-11-02
OSVCLSA-2026-1792809614 No score
ghostscript: Fix of CVE-2026-101258
- CVE-2026-101258: fix -dSAFER bypass via shading function OOB write and procedural filter use-after-free
- Record
CLSA-2026-1792809614- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:12128-1 No score
ghostscript-10.08.0-2.1 on GA media
These are all security issues fixed in the ghostscript-10.08.0-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:12128-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:22176-1 No score
Security update for ghostscript
This update for ghostscript fixes the following issues:
- CVE-2026-101258: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (bsc#1284397).
- CVE-2026-103226: stack-based buffer overflow in
pdfwritevia crafted font data (bsc#1283917).
- Record
openSUSE-SU-2026:22176-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:24468-1 No score
Security update for ghostscript
This update for ghostscript fixes the following issues:
- CVE-2026-101258: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (bsc#1284397).
- CVE-2026-103226: stack-based buffer overflow in
pdfwritevia crafted font data (bsc#1283917).
- Record
SUSE-SU-2026:24468-1- Updated
- 2026-11-04
OSVSUSE-SU-2026:5039-1 No score
Security update for ghostscript
This update for ghostscript fixes the following issues:
- CVE-2026-101258: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (bsc#1284397).
- CVE-2026-103226: stack-based buffer overflow in
pdfwritevia crafted font data (bsc#1283917).
- Record
SUSE-SU-2026:5039-1- Updated
- 2026-11-03
OSVSUSE-SU-2026:5094-1 No score
Security update for ghostscript
This update for ghostscript fixes the following issues:
- CVE-2026-101258: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (bsc#1284397).
- CVE-2026-103226: stack-based buffer overflow in
pdfwritevia crafted font data (bsc#1283917).
- Record
SUSE-SU-2026:5094-1- Updated
- 2026-11-04
OSVUSN-8949-1 No score
ghostscript vulnerabilities
Rick de Jager discovered that Ghostscript incorrectly handled memory under certain circumstances when processing PostScript documents. If a user or automated system were tricked into processing a specially crafted document, an attacker could possibly use this issue to bypass the sandbox and execute arbitrary code. (CVE-2026-101258)
It was discovered that Ghostscript incorrectly handled memory when converting certain fonts. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to cause Ghostscript to crash, or possibly execute arbitrary code. (CVE-2026-103226)
Paulos Yibelo discovered that Ghostscript did not properly validate certain operands when loading fonts. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to bypass the sandbox and execute arbitrary code. (No CVE number)
- Record
USN-8949-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ghostscriptAlmaLinux:10 From an advisory covering 2 CVEs |
before 10.02.1-16.el10_2.3 | 10.02.1-16.el10_2.3 |
ghostscript-docAlmaLinux:10 From an advisory covering 2 CVEs |
before 10.02.1-16.el10_2.3 | 10.02.1-16.el10_2.3 |
ghostscript-tools-dvipdfAlmaLinux:10 From an advisory covering 2 CVEs |
before 10.02.1-16.el10_2.3 | 10.02.1-16.el10_2.3 |
ghostscript-tools-fontsAlmaLinux:10 From an advisory covering 2 CVEs |
before 10.02.1-16.el10_2.3 | 10.02.1-16.el10_2.3 |
ghostscript-tools-printingAlmaLinux:10 From an advisory covering 2 CVEs |
before 10.02.1-16.el10_2.3 | 10.02.1-16.el10_2.3 |
libgsAlmaLinux:10 From an advisory covering 2 CVEs |
before 10.02.1-16.el10_2.3 | 10.02.1-16.el10_2.3 |
libgs-develAlmaLinux:10 From an advisory covering 2 CVEs |
before 10.02.1-16.el10_2.3 | 10.02.1-16.el10_2.3 |
ghostscriptAlmaLinux:8 From an advisory covering 2 CVEs |
before 9.27-19.el8_10 | 9.27-19.el8_10 |
ghostscript-docAlmaLinux:8 From an advisory covering 2 CVEs |
before 9.27-19.el8_10 | 9.27-19.el8_10 |
ghostscript-tools-dvipdfAlmaLinux:8 From an advisory covering 2 CVEs |
before 9.27-19.el8_10 | 9.27-19.el8_10 |
Show 72 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ghostscript-tools-fontsAlmaLinux:8 From an advisory covering 2 CVEs |
before 9.27-19.el8_10 | 9.27-19.el8_10 |
ghostscript-tools-printingAlmaLinux:8 From an advisory covering 2 CVEs |
before 9.27-19.el8_10 | 9.27-19.el8_10 |
ghostscript-x11AlmaLinux:8 From an advisory covering 2 CVEs |
before 9.27-19.el8_10 | 9.27-19.el8_10 |
libgsAlmaLinux:8 From an advisory covering 2 CVEs |
before 9.27-19.el8_10 | 9.27-19.el8_10 |
libgs-develAlmaLinux:8 From an advisory covering 2 CVEs |
before 9.27-19.el8_10 | 9.27-19.el8_10 |
ghostscriptAlmaLinux:9 From an advisory covering 2 CVEs |
before 9.54.0-19.el9_8.3 | 9.54.0-19.el9_8.3 |
ghostscript-docAlmaLinux:9 From an advisory covering 2 CVEs |
before 9.54.0-19.el9_8.3 | 9.54.0-19.el9_8.3 |
ghostscript-tools-dvipdfAlmaLinux:9 From an advisory covering 2 CVEs |
before 9.54.0-19.el9_8.3 | 9.54.0-19.el9_8.3 |
ghostscript-tools-fontsAlmaLinux:9 From an advisory covering 2 CVEs |
before 9.54.0-19.el9_8.3 | 9.54.0-19.el9_8.3 |
ghostscript-tools-printingAlmaLinux:9 From an advisory covering 2 CVEs |
before 9.54.0-19.el9_8.3 | 9.54.0-19.el9_8.3 |
ghostscript-x11AlmaLinux:9 From an advisory covering 2 CVEs |
before 9.54.0-19.el9_8.3 | 9.54.0-19.el9_8.3 |
libgsAlmaLinux:9 From an advisory covering 2 CVEs |
before 9.54.0-19.el9_8.3 | 9.54.0-19.el9_8.3 |
libgs-develAlmaLinux:9 From an advisory covering 2 CVEs |
before 9.54.0-19.el9_8.3 | 9.54.0-19.el9_8.3 |
ghostscriptAlpaquita:23 |
10.0.0-r0 up to 10.01.2-r7 | 10.01.2-r7 |
ghostscriptAlpaquita:25 |
10.05.1-r0 up to 10.05.1-r2 | 10.05.1-r2 |
ghostscriptAlpaquita:stream |
10.0.0-r0 up to 10.08.0-r0 | 10.08.0-r0 |
ghostscriptTuxCare:OracleLinux:7 |
before 9.25-5.0.1.el7.tuxcare.els3 | 9.25-5.0.1.el7.tuxcare.els3 |
ghostscript-cupsTuxCare:OracleLinux:7 |
before 9.25-5.0.1.el7.tuxcare.els3 | 9.25-5.0.1.el7.tuxcare.els3 |
ghostscript-docTuxCare:OracleLinux:7 |
before 9.25-5.0.1.el7.tuxcare.els3 | 9.25-5.0.1.el7.tuxcare.els3 |
ghostscript-gtkTuxCare:OracleLinux:7 |
before 9.25-5.0.1.el7.tuxcare.els3 | 9.25-5.0.1.el7.tuxcare.els3 |
libgsTuxCare:OracleLinux:7 |
before 9.25-5.0.1.el7.tuxcare.els3 | 9.25-5.0.1.el7.tuxcare.els3 |
libgs-develTuxCare:OracleLinux:7 |
before 9.25-5.0.1.el7.tuxcare.els3 | 9.25-5.0.1.el7.tuxcare.els3 |
ghostscriptTuxCare:RHEL:7 |
before 9.25-5.0.1.el7.tuxcare.els3 | 9.25-5.0.1.el7.tuxcare.els3 |
ghostscript-cupsTuxCare:RHEL:7 |
before 9.25-5.0.1.el7.tuxcare.els3 | 9.25-5.0.1.el7.tuxcare.els3 |
ghostscript-docTuxCare:RHEL:7 |
before 9.25-5.0.1.el7.tuxcare.els3 | 9.25-5.0.1.el7.tuxcare.els3 |
ghostscript-gtkTuxCare:RHEL:7 |
before 9.25-5.0.1.el7.tuxcare.els3 | 9.25-5.0.1.el7.tuxcare.els3 |
libgsTuxCare:RHEL:7 |
before 9.25-5.0.1.el7.tuxcare.els3 | 9.25-5.0.1.el7.tuxcare.els3 |
libgs-develTuxCare:RHEL:7 |
before 9.25-5.0.1.el7.tuxcare.els3 | 9.25-5.0.1.el7.tuxcare.els3 |
ghostscriptDebian:12 |
All versions, plus listed versions 10.0.0~dfsg-1110.0.0~dfsg-11+deb12u110.0.0~dfsg-11+deb12u210.0.0~dfsg-11+deb12u310.0.0~dfsg-11+deb12u4 Show 28 moreShow less10.0.0~dfsg-11+deb12u510.0.0~dfsg-11+deb12u610.0.0~dfsg-11+deb12u710.0.0~dfsg-11+deb12u810.01.2~dfsg-110.02.0~dfsg-110.02.0~dfsg-210.02.1~dfsg-110.02.1~dfsg-210.02.1~dfsg-310.03.0~dfsg-110.03.1~dfsg-110.03.1~dfsg-210.03.1~dfsg~git20240518-110.04.0~dfsg-110.04.0~dfsg-210.05.0~dfsg-110.05.1~dfsg-110.05.1~dfsg-210.05.1~dfsg-310.06.0~dfsg-110.06.0~dfsg-210.06.0~dfsg-310.07.0~dfsg-110.07.0~dfsg-210.07.1~dfsg-110.08.0~dfsg-110.08.0~dfsg-2 |
None known |
ghostscriptDebian:13 |
before 10.05.1~dfsg-1+deb13u3, plus listed versions 10.05.1~dfsg-110.05.1~dfsg-1+deb13u110.05.1~dfsg-1+deb13u2 |
10.05.1~dfsg-1+deb13u3 |
ghostscriptDebian:14 |
before 10.08.0~dfsg-1, plus listed versions 10.05.1~dfsg-110.05.1~dfsg-210.05.1~dfsg-310.06.0~dfsg-110.06.0~dfsg-2 Show 4 moreShow less10.06.0~dfsg-310.07.0~dfsg-110.07.0~dfsg-210.07.1~dfsg-1 |
10.08.0~dfsg-1 |
ghostscriptRed Hat:enterprise_linux:10.2 From an advisory covering 2 CVEs |
before 0:10.02.1-16.el10_2.3 | 0:10.02.1-16.el10_2.3 |
libgsRed Hat:enterprise_linux:10.2 From an advisory covering 2 CVEs |
before 0:10.02.1-16.el10_2.3 | 0:10.02.1-16.el10_2.3 |
ghostscriptRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:9.27-19.el8_10 | 0:9.27-19.el8_10 |
libgsRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:9.27-19.el8_10 | 0:9.27-19.el8_10 |
ghostscriptRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:9.54.0-19.el9_8.3 | 0:9.54.0-19.el9_8.3 |
libgsRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:9.54.0-19.el9_8.3 | 0:9.54.0-19.el9_8.3 |
ghostscriptRed Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs |
before 0:9.54.0-19.el9_8.3 | 0:9.54.0-19.el9_8.3 |
ghostscriptRocky Linux:10 From an advisory covering 2 CVEs |
before 0:10.02.1-16.el10_2.3 | 0:10.02.1-16.el10_2.3 |
ghostscriptRocky Linux:8 From an advisory covering 2 CVEs |
before 0:9.27-19.el8_10 | 0:9.27-19.el8_10 |
ghostscriptRocky Linux:9 From an advisory covering 2 CVEs |
before 0:9.54.0-19.el9_8.3 | 0:9.54.0-19.el9_8.3 |
ghostscriptSUSE:Linux Enterprise Server 16.0 From an advisory covering 2 CVEs |
before 10.08.0-160000.2.1 | 10.08.0-160000.2.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 2 CVEs |
before 10.08.0-160000.2.1 | 10.08.0-160000.2.1 |
ghostscriptSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 2 CVEs |
before 9.52-150000.217.1 | 9.52-150000.217.1 |
ghostscriptSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 2 CVEs |
before 9.52-150000.217.1 | 9.52-150000.217.1 |
ghostscriptSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 2 CVEs |
before 9.52-150000.217.1 | 9.52-150000.217.1 |
ghostscriptSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 2 CVEs |
before 9.52-150000.217.1 | 9.52-150000.217.1 |
ghostscriptSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 2 CVEs |
before 9.52-150000.217.1 | 9.52-150000.217.1 |
ghostscriptSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 2 CVEs |
before 9.52-150000.217.1 | 9.52-150000.217.1 |
ghostscriptSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 2 CVEs |
before 9.52-150000.217.1 | 9.52-150000.217.1 |
ghostscriptSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 2 CVEs |
before 9.52-150000.217.1 | 9.52-150000.217.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 2 CVEs |
before 9.52-150000.217.1 | 9.52-150000.217.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 2 CVEs |
before 9.52-150000.217.1 | 9.52-150000.217.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 2 CVEs |
before 9.52-150000.217.1 | 9.52-150000.217.1 |
ghostscriptSUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 2 CVEs |
before 9.52-23.103.1 | 9.52-23.103.1 |
ghostscriptSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 2 CVEs |
before 9.52-23.103.1 | 9.52-23.103.1 |
ghostscriptUbuntu:Pro:16.04:LTS |
before 9.26~dfsg+0-0ubuntu0.16.04.14+esm11, plus listed versions 9.16~dfsg~0-0ubuntu39.16~dfsg~0-0ubuntu49.18~dfsg~0-0ubuntu19.18~dfsg~0-0ubuntu29.18~dfsg~0-0ubuntu2.2 Show 32 moreShow less9.18~dfsg~0-0ubuntu2.39.18~dfsg~0-0ubuntu2.49.18~dfsg~0-0ubuntu2.69.18~dfsg~0-0ubuntu2.79.18~dfsg~0-0ubuntu2.89.18~dfsg~0-0ubuntu2.99.25~dfsg+1-0ubuntu0.16.04.19.25~dfsg+1-0ubuntu0.16.04.29.25~dfsg+1-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.19.26~dfsg+0-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.49.26~dfsg+0-0ubuntu0.16.04.59.26~dfsg+0-0ubuntu0.16.04.69.26~dfsg+0-0ubuntu0.16.04.79.26~dfsg+0-0ubuntu0.16.04.89.26~dfsg+0-0ubuntu0.16.04.99.26~dfsg+0-0ubuntu0.16.04.109.26~dfsg+0-0ubuntu0.16.04.119.26~dfsg+0-0ubuntu0.16.04.129.26~dfsg+0-0ubuntu0.16.04.139.26~dfsg+0-0ubuntu0.16.04.149.26~dfsg+0-0ubuntu0.16.04.14+esm19.26~dfsg+0-0ubuntu0.16.04.14+esm29.26~dfsg+0-0ubuntu0.16.04.14+esm39.26~dfsg+0-0ubuntu0.16.04.14+esm49.26~dfsg+0-0ubuntu0.16.04.14+esm59.26~dfsg+0-0ubuntu0.16.04.14+esm69.26~dfsg+0-0ubuntu0.16.04.14+esm79.26~dfsg+0-0ubuntu0.16.04.14+esm89.26~dfsg+0-0ubuntu0.16.04.14+esm99.26~dfsg+0-0ubuntu0.16.04.14+esm10 |
9.26~dfsg+0-0ubuntu0.16.04.14+esm11 |
ghostscriptUbuntu:Pro:18.04:LTS |
before 9.26~dfsg+0-0ubuntu0.18.04.18+esm6, plus listed versions 9.21~dfsg+1-0ubuntu39.22~dfsg+1-0ubuntu19.22~dfsg+1-0ubuntu1.19.22~dfsg+1-0ubuntu1.29.25~dfsg+1-0ubuntu0.18.04.1 Show 23 moreShow less9.25~dfsg+1-0ubuntu0.18.04.29.26~dfsg+0-0ubuntu0.18.04.19.26~dfsg+0-0ubuntu0.18.04.39.26~dfsg+0-0ubuntu0.18.04.49.26~dfsg+0-0ubuntu0.18.04.59.26~dfsg+0-0ubuntu0.18.04.69.26~dfsg+0-0ubuntu0.18.04.79.26~dfsg+0-0ubuntu0.18.04.89.26~dfsg+0-0ubuntu0.18.04.99.26~dfsg+0-0ubuntu0.18.04.109.26~dfsg+0-0ubuntu0.18.04.119.26~dfsg+0-0ubuntu0.18.04.129.26~dfsg+0-0ubuntu0.18.04.139.26~dfsg+0-0ubuntu0.18.04.149.26~dfsg+0-0ubuntu0.18.04.159.26~dfsg+0-0ubuntu0.18.04.169.26~dfsg+0-0ubuntu0.18.04.179.26~dfsg+0-0ubuntu0.18.04.189.26~dfsg+0-0ubuntu0.18.04.18+esm19.26~dfsg+0-0ubuntu0.18.04.18+esm29.26~dfsg+0-0ubuntu0.18.04.18+esm39.26~dfsg+0-0ubuntu0.18.04.18+esm49.26~dfsg+0-0ubuntu0.18.04.18+esm5 |
9.26~dfsg+0-0ubuntu0.18.04.18+esm6 |
ghostscriptUbuntu:Pro:20.04:LTS |
before 9.50~dfsg-5ubuntu4.15+esm3, plus listed versions 9.27~dfsg+0-0ubuntu39.27~dfsg+0-0ubuntu49.50~dfsg-5ubuntu19.50~dfsg-5ubuntu29.50~dfsg-5ubuntu3 Show 18 moreShow less9.50~dfsg-5ubuntu49.50~dfsg-5ubuntu4.19.50~dfsg-5ubuntu4.29.50~dfsg-5ubuntu4.39.50~dfsg-5ubuntu4.49.50~dfsg-5ubuntu4.59.50~dfsg-5ubuntu4.69.50~dfsg-5ubuntu4.79.50~dfsg-5ubuntu4.89.50~dfsg-5ubuntu4.99.50~dfsg-5ubuntu4.109.50~dfsg-5ubuntu4.119.50~dfsg-5ubuntu4.129.50~dfsg-5ubuntu4.139.50~dfsg-5ubuntu4.149.50~dfsg-5ubuntu4.159.50~dfsg-5ubuntu4.15+esm19.50~dfsg-5ubuntu4.15+esm2 |
9.50~dfsg-5ubuntu4.15+esm3 |
ghostscriptUbuntu:22.04:LTS |
before 9.55.0~dfsg1-0ubuntu5.15, plus listed versions 9.54.0~dfsg1-0ubuntu29.55.0~dfsg1-0ubuntu49.55.0~dfsg1-0ubuntu59.55.0~dfsg1-0ubuntu5.19.55.0~dfsg1-0ubuntu5.2 Show 11 moreShow less9.55.0~dfsg1-0ubuntu5.39.55.0~dfsg1-0ubuntu5.49.55.0~dfsg1-0ubuntu5.59.55.0~dfsg1-0ubuntu5.69.55.0~dfsg1-0ubuntu5.79.55.0~dfsg1-0ubuntu5.99.55.0~dfsg1-0ubuntu5.109.55.0~dfsg1-0ubuntu5.119.55.0~dfsg1-0ubuntu5.129.55.0~dfsg1-0ubuntu5.139.55.0~dfsg1-0ubuntu5.14 |
9.55.0~dfsg1-0ubuntu5.15 |
ghostscriptUbuntu:24.04:LTS |
before 10.02.1~dfsg1-0ubuntu7.10, plus listed versions 10.01.2~dfsg1-0ubuntu210.01.2~dfsg1-0ubuntu2.110.02.1~dfsg1-0ubuntu110.02.1~dfsg1-0ubuntu210.02.1~dfsg1-0ubuntu5 Show 10 moreShow less10.02.1~dfsg1-0ubuntu610.02.1~dfsg1-0ubuntu710.02.1~dfsg1-0ubuntu7.110.02.1~dfsg1-0ubuntu7.310.02.1~dfsg1-0ubuntu7.410.02.1~dfsg1-0ubuntu7.510.02.1~dfsg1-0ubuntu7.610.02.1~dfsg1-0ubuntu7.710.02.1~dfsg1-0ubuntu7.810.02.1~dfsg1-0ubuntu7.9 |
10.02.1~dfsg1-0ubuntu7.10 |
ghostscriptUbuntu:26.10 |
before 10.07.1~dfsg-1ubuntu2.1, plus listed versions 10.06.0~dfsg-3ubuntu110.07.1~dfsg-1ubuntu110.07.1~dfsg-1ubuntu2 |
10.07.1~dfsg-1ubuntu2.1 |
ghostscriptUbuntu:26.04:LTS |
before 10.06.0~dfsg-3ubuntu1.2, plus listed versions 10.05.0dfsg1-0ubuntu410.05.0dfsg1-0ubuntu510.06.0~dfsg-3ubuntu110.06.0~dfsg-3ubuntu1.1 |
10.06.0~dfsg-3ubuntu1.2 |
ghostscriptUbuntu:Pro:16.04:LTS From an advisory covering 2 CVEs |
before 9.26~dfsg+0-0ubuntu0.16.04.14+esm11, plus listed versions 9.16~dfsg~0-0ubuntu39.16~dfsg~0-0ubuntu49.18~dfsg~0-0ubuntu19.18~dfsg~0-0ubuntu29.18~dfsg~0-0ubuntu2.2 Show 32 moreShow less9.18~dfsg~0-0ubuntu2.39.18~dfsg~0-0ubuntu2.49.18~dfsg~0-0ubuntu2.69.18~dfsg~0-0ubuntu2.79.18~dfsg~0-0ubuntu2.89.18~dfsg~0-0ubuntu2.99.25~dfsg+1-0ubuntu0.16.04.19.25~dfsg+1-0ubuntu0.16.04.29.25~dfsg+1-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.19.26~dfsg+0-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.49.26~dfsg+0-0ubuntu0.16.04.59.26~dfsg+0-0ubuntu0.16.04.69.26~dfsg+0-0ubuntu0.16.04.79.26~dfsg+0-0ubuntu0.16.04.89.26~dfsg+0-0ubuntu0.16.04.99.26~dfsg+0-0ubuntu0.16.04.109.26~dfsg+0-0ubuntu0.16.04.119.26~dfsg+0-0ubuntu0.16.04.129.26~dfsg+0-0ubuntu0.16.04.139.26~dfsg+0-0ubuntu0.16.04.149.26~dfsg+0-0ubuntu0.16.04.14+esm19.26~dfsg+0-0ubuntu0.16.04.14+esm29.26~dfsg+0-0ubuntu0.16.04.14+esm39.26~dfsg+0-0ubuntu0.16.04.14+esm49.26~dfsg+0-0ubuntu0.16.04.14+esm59.26~dfsg+0-0ubuntu0.16.04.14+esm69.26~dfsg+0-0ubuntu0.16.04.14+esm79.26~dfsg+0-0ubuntu0.16.04.14+esm89.26~dfsg+0-0ubuntu0.16.04.14+esm99.26~dfsg+0-0ubuntu0.16.04.14+esm10 |
9.26~dfsg+0-0ubuntu0.16.04.14+esm11 |
ghostscriptUbuntu:Pro:18.04:LTS From an advisory covering 2 CVEs |
before 9.26~dfsg+0-0ubuntu0.18.04.18+esm6, plus listed versions 9.21~dfsg+1-0ubuntu39.22~dfsg+1-0ubuntu19.22~dfsg+1-0ubuntu1.19.22~dfsg+1-0ubuntu1.29.25~dfsg+1-0ubuntu0.18.04.1 Show 23 moreShow less9.25~dfsg+1-0ubuntu0.18.04.29.26~dfsg+0-0ubuntu0.18.04.19.26~dfsg+0-0ubuntu0.18.04.39.26~dfsg+0-0ubuntu0.18.04.49.26~dfsg+0-0ubuntu0.18.04.59.26~dfsg+0-0ubuntu0.18.04.69.26~dfsg+0-0ubuntu0.18.04.79.26~dfsg+0-0ubuntu0.18.04.89.26~dfsg+0-0ubuntu0.18.04.99.26~dfsg+0-0ubuntu0.18.04.109.26~dfsg+0-0ubuntu0.18.04.119.26~dfsg+0-0ubuntu0.18.04.129.26~dfsg+0-0ubuntu0.18.04.139.26~dfsg+0-0ubuntu0.18.04.149.26~dfsg+0-0ubuntu0.18.04.159.26~dfsg+0-0ubuntu0.18.04.169.26~dfsg+0-0ubuntu0.18.04.179.26~dfsg+0-0ubuntu0.18.04.189.26~dfsg+0-0ubuntu0.18.04.18+esm19.26~dfsg+0-0ubuntu0.18.04.18+esm29.26~dfsg+0-0ubuntu0.18.04.18+esm39.26~dfsg+0-0ubuntu0.18.04.18+esm49.26~dfsg+0-0ubuntu0.18.04.18+esm5 |
9.26~dfsg+0-0ubuntu0.18.04.18+esm6 |
ghostscriptUbuntu:Pro:20.04:LTS From an advisory covering 2 CVEs |
before 9.50~dfsg-5ubuntu4.15+esm3, plus listed versions 9.27~dfsg+0-0ubuntu39.27~dfsg+0-0ubuntu49.50~dfsg-5ubuntu19.50~dfsg-5ubuntu29.50~dfsg-5ubuntu3 Show 18 moreShow less9.50~dfsg-5ubuntu49.50~dfsg-5ubuntu4.19.50~dfsg-5ubuntu4.29.50~dfsg-5ubuntu4.39.50~dfsg-5ubuntu4.49.50~dfsg-5ubuntu4.59.50~dfsg-5ubuntu4.69.50~dfsg-5ubuntu4.79.50~dfsg-5ubuntu4.89.50~dfsg-5ubuntu4.99.50~dfsg-5ubuntu4.109.50~dfsg-5ubuntu4.119.50~dfsg-5ubuntu4.129.50~dfsg-5ubuntu4.139.50~dfsg-5ubuntu4.149.50~dfsg-5ubuntu4.159.50~dfsg-5ubuntu4.15+esm19.50~dfsg-5ubuntu4.15+esm2 |
9.50~dfsg-5ubuntu4.15+esm3 |
ghostscriptUbuntu:22.04:LTS From an advisory covering 2 CVEs |
before 9.55.0~dfsg1-0ubuntu5.15, plus listed versions 9.54.0~dfsg1-0ubuntu29.55.0~dfsg1-0ubuntu49.55.0~dfsg1-0ubuntu59.55.0~dfsg1-0ubuntu5.19.55.0~dfsg1-0ubuntu5.2 Show 11 moreShow less9.55.0~dfsg1-0ubuntu5.39.55.0~dfsg1-0ubuntu5.49.55.0~dfsg1-0ubuntu5.59.55.0~dfsg1-0ubuntu5.69.55.0~dfsg1-0ubuntu5.79.55.0~dfsg1-0ubuntu5.99.55.0~dfsg1-0ubuntu5.109.55.0~dfsg1-0ubuntu5.119.55.0~dfsg1-0ubuntu5.129.55.0~dfsg1-0ubuntu5.139.55.0~dfsg1-0ubuntu5.14 |
9.55.0~dfsg1-0ubuntu5.15 |
ghostscriptUbuntu:24.04:LTS From an advisory covering 2 CVEs |
before 10.02.1~dfsg1-0ubuntu7.10, plus listed versions 10.01.2~dfsg1-0ubuntu210.01.2~dfsg1-0ubuntu2.110.02.1~dfsg1-0ubuntu110.02.1~dfsg1-0ubuntu210.02.1~dfsg1-0ubuntu5 Show 10 moreShow less10.02.1~dfsg1-0ubuntu610.02.1~dfsg1-0ubuntu710.02.1~dfsg1-0ubuntu7.110.02.1~dfsg1-0ubuntu7.310.02.1~dfsg1-0ubuntu7.410.02.1~dfsg1-0ubuntu7.510.02.1~dfsg1-0ubuntu7.610.02.1~dfsg1-0ubuntu7.710.02.1~dfsg1-0ubuntu7.810.02.1~dfsg1-0ubuntu7.9 |
10.02.1~dfsg1-0ubuntu7.10 |
ghostscriptUbuntu:26.10 From an advisory covering 2 CVEs |
before 10.07.1~dfsg-1ubuntu2.1, plus listed versions 10.06.0~dfsg-3ubuntu110.07.1~dfsg-1ubuntu110.07.1~dfsg-1ubuntu2 |
10.07.1~dfsg-1ubuntu2.1 |
ghostscriptUbuntu:26.04:LTS From an advisory covering 2 CVEs |
before 10.06.0~dfsg-3ubuntu1.2, plus listed versions 10.05.0dfsg1-0ubuntu410.05.0dfsg1-0ubuntu510.06.0~dfsg-3ubuntu110.06.0~dfsg-3ubuntu1.1 |
10.06.0~dfsg-3ubuntu1.2 |
ghostscriptopenSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 10.08.0-2.1 | 10.08.0-2.1 |
ghostscriptopenSUSE:Leap 16.0 From an advisory covering 2 CVEs |
before 10.08.0-160000.2.1 | 10.08.0-160000.2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | EUVD, NVD, OSV | |
| affected, aliases, references | CVE List, OSV | |
| affected, aliases, references | OSV | |
| affected, facts | OSV | |
| affected, aliases, references | OSV | |
| affected, aliases, references | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-101258 is a high vulnerability (CVSS 7.8) in Red Hat Enterprise Linux 10, published October 6, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.18%, the 7th percentile. Fixed in ghostscript 10.01.2-r7.
References
access.redhat.com/errata/RHSA-2026:83551
bugzilla.redhat.com/show_bug.cgi?id=2542396
github.com/v12-security/pocs/tree/main/ghostscript
Show 43 moreShow less
nvd.nist.gov/vuln/detail/CVE-2026-101258
errata.almalinux.org/10/ALSA-2026-83551.html
docs.bell-sw.com/security/cves/CVE-2026-101258
errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1792809195.html
security-tracker.debian.org/tracker/CVE-2026-101258
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_83551.json
cve.org/CVERecord?id=CVE-2026-101258
artifex.com
bugs.ghostscript.com/attachment.cgi?id=28495
vuldb.com/cve/CVE-2026-103226
errata.rockylinux.org/RLSA-2026:83551
suse.com/support/update/announcement/2026/suse-su-202624468-1
bugzilla.suse.com/1283917
ubuntu.com/security/CVE-2026-101258
debian.org/security/2026/dsa-6550
bugs.launchpad.net/bugs/2171528