Every CVE Search/ Get API key

CVE-2018-19478

In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long...

5.5 MediumFix available

In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when parsing the file.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.89%Up 0.4 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 5.5

In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when parsing the file.

Record
CVE-2018-19478
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when parsing the file.

Record
CVE-2018-19478
Updated
2026-11-02
EUVDEUVD-2018-11167 No score

In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when parsing the file.

Record
EUVD-2018-11167
Updated
2026-11-03
GitHub AdvisoriesGHSA-fcmg-pjrg-hphj 5.5

In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long...

In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when parsing the file.

Record
GHSA-fcmg-pjrg-hphj
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-20
Updated
2026-11-02
OSVBELL-CVE-2018-19478 5.5

CVE-2018-19478 does not affect BellSoft software

Record
BELL-CVE-2018-19478
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 5.5

In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when parsing the file.

Record
CVE-2018-19478
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2018-19478 5.5

In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when parsing the file.

Record
DEBIAN-CVE-2018-19478
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2018-19478 5.5

In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when parsing the file.

Record
UBUNTU-CVE-2018-19478
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ghostscript
Debian:12
 before 9.26~dfsg-1
9.26~dfsg-1
ghostscript
Debian:13
 before 9.26~dfsg-1
9.26~dfsg-1
ghostscript
Debian:14
 before 9.26~dfsg-1
9.26~dfsg-1
ghostscript
Debian:8
From an advisory covering 2 CVEs
 before 9.06~dfsg-2+deb8u13, plus listed versions
9.06~dfsg-29.06~dfsg-2+deb8u19.06~dfsg-2+deb8u109.06~dfsg-2+deb8u119.06~dfsg-2+deb8u12
Show 8 moreShow less
9.06~dfsg-2+deb8u29.06~dfsg-2+deb8u39.06~dfsg-2+deb8u49.06~dfsg-2+deb8u59.06~dfsg-2+deb8u69.06~dfsg-2+deb8u79.06~dfsg-2+deb8u89.06~dfsg-2+deb8u9
9.06~dfsg-2+deb8u13
ghostscript
Debian:9
From an advisory covering 6 CVEs
 before 9.26~dfsg-0+deb9u1, plus listed versions
9.20~dfsg-3.29.20~dfsg-3.2+deb9u19.20~dfsg-3.2+deb9u29.20~dfsg-3.2+deb9u39.20~dfsg-3.2+deb9u4
Show 19 moreShow less
9.20~dfsg-3.2+deb9u59.21~dfsg-19.21~dfsg-1~exp19.22~dfsg-19.22~dfsg-29.22~dfsg-2.19.22~dfsg-2~riscv649.22~dfsg-39.22~~rc1~dfsg-19.24~~rc2~dfsg-19.25~dfsg-0+deb9u19.25~dfsg-19.25~dfsg-1~exp19.25~dfsg-29.25~dfsg-39.25~dfsg-49.25~dfsg-59.25~dfsg-69.25~dfsg-7
9.26~dfsg-0+deb9u1
ghostscript
Ubuntu:14.04:LTS
 before 9.26~dfsg+0-0ubuntu0.14.04.1, plus listed versions
9.10~dfsg-0ubuntu29.10~dfsg-0ubuntu39.10~dfsg-0ubuntu49.10~dfsg-0ubuntu59.10~dfsg-0ubuntu6
Show 18 moreShow less
9.10~dfsg-0ubuntu79.10~dfsg-0ubuntu89.10~dfsg-0ubuntu99.10~dfsg-0ubuntu109.10~dfsg-0ubuntu10.19.10~dfsg-0ubuntu10.29.10~dfsg-0ubuntu10.39.10~dfsg-0ubuntu10.49.10~dfsg-0ubuntu10.59.10~dfsg-0ubuntu10.69.10~dfsg-0ubuntu10.79.10~dfsg-0ubuntu10.99.10~dfsg-0ubuntu10.109.10~dfsg-0ubuntu10.129.10~dfsg-0ubuntu10.139.25~dfsg+1-0ubuntu0.14.04.19.25~dfsg+1-0ubuntu0.14.04.29.25~dfsg+1-0ubuntu0.14.04.3
9.26~dfsg+0-0ubuntu0.14.04.1
ghostscript
Ubuntu:16.04:LTS
 before 9.26~dfsg+0-0ubuntu0.16.04.1, plus listed versions
9.16~dfsg~0-0ubuntu39.16~dfsg~0-0ubuntu49.18~dfsg~0-0ubuntu19.18~dfsg~0-0ubuntu29.18~dfsg~0-0ubuntu2.2
Show 9 moreShow less
9.18~dfsg~0-0ubuntu2.39.18~dfsg~0-0ubuntu2.49.18~dfsg~0-0ubuntu2.69.18~dfsg~0-0ubuntu2.79.18~dfsg~0-0ubuntu2.89.18~dfsg~0-0ubuntu2.99.25~dfsg+1-0ubuntu0.16.04.19.25~dfsg+1-0ubuntu0.16.04.29.25~dfsg+1-0ubuntu0.16.04.3
9.26~dfsg+0-0ubuntu0.16.04.1
ghostscript
Ubuntu:18.04:LTS
 before 9.26~dfsg+0-0ubuntu0.18.04.1, plus listed versions
9.21~dfsg+1-0ubuntu39.22~dfsg+1-0ubuntu19.22~dfsg+1-0ubuntu1.19.22~dfsg+1-0ubuntu1.29.25~dfsg+1-0ubuntu0.18.04.19.25~dfsg+1-0ubuntu0.18.04.2
9.26~dfsg+0-0ubuntu0.18.04.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-19478 is a medium vulnerability (CVSS 5.5) in Artifex Ghostscript, published November 27, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.89%, the 79th percentile. Fixed in ghostscript 9.26~dfsg-1.

References

Show 7 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open