CVE-2025-27836
An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print...
An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c.
- Record
CVE-2025-27836- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
EUVDEUVD-2025-8089
An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c.
- Record
EUVD-2025-8089- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-96p6-38w3-wjpv
An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print...
An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c.
- Record
GHSA-96p6-38w3-wjpv- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
NVD
An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c.
- Record
CVE-2025-27836- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
OSVALPINE-CVE-2025-27836
An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c.
- Record
ALPINE-CVE-2025-27836- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVBELL-CVE-2025-27836
- Record
BELL-CVE-2025-27836- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 16 moreShow less
OSV
An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c.
- Record
CVE-2025-27836- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2025-27836
An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c.
- Record
DEBIAN-CVE-2025-27836- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2025-1358
ghostscript security update
Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.
Security Fix(es):
An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c.(CVE-2025-27830)
An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c.(CVE-2025-27832)
An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs via an oversized Type 4 function in a PDF document to pdf/pdf_func.c.(CVE-2025-27834)
An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c.(CVE-2025-27835)
An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c.(CVE-2025-27836)
- Record
OESA-2025-1358- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2025-1359
ghostscript security update
Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.
Security Fix(es):
An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c.(CVE-2025-27830)
An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c.(CVE-2025-27832)
An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs for a long TTF font name to pdf/pdf_fmap.c.(CVE-2025-27833)
An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs via an oversized Type 4 function in a PDF document to pdf/pdf_func.c.(CVE-2025-27834)
An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c.(CVE-2025-27835)
An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c.(CVE-2025-27836)
- Record
OESA-2025-1359- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2025-1360
ghostscript security update
Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.
Security Fix(es):
An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c.(CVE-2025-27830)
An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c.(CVE-2025-27832)
An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs for a long TTF font name to pdf/pdf_fmap.c.(CVE-2025-27833)
An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs via an oversized Type 4 function in a PDF document to pdf/pdf_func.c.(CVE-2025-27834)
An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c.(CVE-2025-27835)
An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c.(CVE-2025-27836)
- Record
OESA-2025-1360- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2025-1361
ghostscript security update
Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.
Security Fix(es):
An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c.(CVE-2025-27830)
An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c.(CVE-2025-27832)
An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c.(CVE-2025-27835)
An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c.(CVE-2025-27836)
- Record
OESA-2025-1361- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2025-1362
ghostscript security update
Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.
Security Fix(es):
An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c.(CVE-2025-27830)
An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c.(CVE-2025-27832)
An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs via an oversized Type 4 function in a PDF document to pdf/pdf_func.c.(CVE-2025-27834)
An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c.(CVE-2025-27835)
An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c.(CVE-2025-27836)
- Record
OESA-2025-1362- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-27836
An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c.
- Record
UBUNTU-CVE-2025-27836- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVCLSA-2026-1775120182 No score
ghostscript: Fix of 4 CVEs
- CVE-2025-27830: fix potential buffer overflow with DollarBlend in font serialization
- CVE-2025-27831: prevent Unicode decoding overrun in txtwrite/docxwrite devices
- CVE-2025-27835: fix confusion between bytes and shorts in glyph to Unicode conversion
- CVE-2025-27836: fix potential print buffer overflow in BJ10V device
- Record
CLSA-2026-1775120182- Updated
- 2026-11-02
OSVCLSA-2026-1775210556 No score
ghostscript: Fix of 4 CVEs
- CVE-2025-27830: fix potential buffer overflow with DollarBlend in font serialization
- CVE-2025-27831: prevent Unicode decoding overrun in txtwrite/docxwrite devices
- CVE-2025-27835: fix confusion between bytes and shorts in glyph to Unicode conversion
- CVE-2025-27836: fix potential print buffer overflow in BJ10V device
- Record
CLSA-2026-1775210556- Updated
- 2026-11-02
OSVMGASA-2025-0098 No score
Updated ghostscript packages fix security vulnerabilities
This release addresses CVEs: CVE-2025-27835, CVE-2025-27832, CVE-2025-27831, CVE-2025-27836, CVE-2025-27830, CVE-2025-27833, CVE-2025-27837, CVE-2025-27834 The 10.05.0 release deprecates the non-standard operator "selectdevice", all code should now be using the standard "setpagedevice" operator. "selectdevice" will be removed in the 10.06.0 release. We now support production of PDF/X-1a and PDF/X-4a in addition to the existing support for PDF/X-3
- Record
MGASA-2025-0098- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:14953-1 No score
ghostscript-10.05.0-1.1 on GA media
These are all security issues fixed in the ghostscript-10.05.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:14953-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:1118-1 No score
Security update for ghostscript
This update for ghostscript fixes the following issues:
- CVE-2025-27831: Fixed text buffer overflow in DOCXWRITE TXTWRITE device via long characters to devices/vector/doc_common.c (bsc#1240075)
- CVE-2025-27832: Fixed compression buffer overflow in NPDL device for contrib/japanese/gdevnpdl.c (bsc#1240077)
- CVE-2025-27835: Fixed buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c (bsc#1240080)
- CVE-2025-27836: Fixed Print buffer overflow in BJ10V device in contrib/japanese/gdev10v.c (bsc#1240081)
- Record
SUSE-SU-2025:1118-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:1127-1 No score
Security update for ghostscript
This update for ghostscript fixes the following issues:
- CVE-2025-27831: Fixed text buffer overflow in DOCXWRITE TXTWRITE device via long characters to devices/vector/doc_common.c (bsc#1240075)
- CVE-2025-27832: Fixed compression buffer overflow in NPDL device for contrib/japanese/gdevnpdl.c (bsc#1240077)
- CVE-2025-27835: Fixed buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c (bsc#1240080)
- CVE-2025-27836: Fixed Print buffer overflow in BJ10V device in contrib/japanese/gdev10v.c (bsc#1240081)
- Record
SUSE-SU-2025:1127-1- Updated
- 2026-11-02
OSVUSN-7378-1 No score
ghostscript vulnerabilities
It was discovered that Ghostscript incorrectly serialized DollarBlend in certain fonts. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-27830)
It was discovered that Ghostscript incorrectly handled the DOCXWRITE TXTWRITE device. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 24.10. (CVE-2025-27831)
It was discovered that Ghostscript incorrectly handled the NPDL device. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-27832)
It was discovered that Ghostscript incorrectly handled certain long TTF file names. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 24.04 LTS and Ubuntu 24.10. (CVE-2025-27833)
It was discovered that Ghostscript incorrectly handled oversized Type 4 functions in certain PDF documents. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 24.10. (CVE-2025-27834)
It was discovered that Ghostscript incorrectly handled converting certain glyphs to Unicode. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-27835)
It was discovered that Ghostscript incorrectly handled the BJ10V device. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-27836)
- Record
USN-7378-1- Updated
- 2026-11-02
OSVUSN-7623-1 No score
ghostscript vulnerabilities
It was discovered that OpenJPEG, vendored in Ghostscript did not correctly handle large image files. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2023-39327) Thomas Rinsma discovered that Ghostscript did not correctly handle printing certain variables. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2024-29508) It was discovered that Ghostscript did not correctly handle loading certain libraries. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. (CVE-2024-33871) It was discovered that Ghostscript did not correctly handle certain memory operations. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2024-56826, CVE-2024-56827, CVE-2025-27832, CVE-2025-27835, CVE-2025-27836) Vasileios Flengas discovered that Ghostscript did not correctly handle argument sanitization. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 24.10 and Ubuntu 25.04. (CVE-2025-48708)
- Record
USN-7623-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ghostscriptAlpine:v3.18 |
before 10.05.0 | 10.05.0 |
ghostscriptAlpine:v3.19 |
before 10.05.0-r0 | 10.05.0-r0 |
ghostscriptAlpine:v3.20 |
before 10.05.0-r0 | 10.05.0-r0 |
ghostscriptAlpine:v3.21 |
before 10.05.0-r0 | 10.05.0-r0 |
ghostscriptAlpine:v3.22 |
before 10.05.0-r0 | 10.05.0-r0 |
ghostscriptAlpine:v3.23 |
before 10.05.0-r0 | 10.05.0-r0 |
ghostscriptAlpine:v3.24 |
before 10.05.0-r0 | 10.05.0-r0 |
ghostscriptAlpaquita:23 |
10.0.0-r0 up to 10.01.2-r4 | 10.01.2-r4 |
ghostscriptAlpaquita:stream |
10.0.0-r0 up to 10.05.0-r0 | 10.05.0-r0 |
ghostscriptTuxCare:AlmaLinux:9.2 From an advisory covering 4 CVEs |
before 9.54.0-11.el9_2.tuxcare.els10 | 9.54.0-11.el9_2.tuxcare.els10 |
Show 60 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ghostscript-docTuxCare:AlmaLinux:9.2 From an advisory covering 4 CVEs |
before 9.54.0-11.el9_2.tuxcare.els10 | 9.54.0-11.el9_2.tuxcare.els10 |
ghostscript-gtkTuxCare:AlmaLinux:9.2 From an advisory covering 4 CVEs |
before 9.54.0-11.el9_2.tuxcare.els10 | 9.54.0-11.el9_2.tuxcare.els10 |
ghostscript-tools-dvipdfTuxCare:AlmaLinux:9.2 From an advisory covering 4 CVEs |
before 9.54.0-11.el9_2.tuxcare.els10 | 9.54.0-11.el9_2.tuxcare.els10 |
ghostscript-tools-fontsTuxCare:AlmaLinux:9.2 From an advisory covering 4 CVEs |
before 9.54.0-11.el9_2.tuxcare.els10 | 9.54.0-11.el9_2.tuxcare.els10 |
ghostscript-tools-printingTuxCare:AlmaLinux:9.2 From an advisory covering 4 CVEs |
before 9.54.0-11.el9_2.tuxcare.els10 | 9.54.0-11.el9_2.tuxcare.els10 |
ghostscript-x11TuxCare:AlmaLinux:9.2 From an advisory covering 4 CVEs |
before 9.54.0-11.el9_2.tuxcare.els10 | 9.54.0-11.el9_2.tuxcare.els10 |
libgsTuxCare:AlmaLinux:9.2 From an advisory covering 4 CVEs |
before 9.54.0-11.el9_2.tuxcare.els10 | 9.54.0-11.el9_2.tuxcare.els10 |
libgs-develTuxCare:AlmaLinux:9.2 From an advisory covering 4 CVEs |
before 9.54.0-11.el9_2.tuxcare.els10 | 9.54.0-11.el9_2.tuxcare.els10 |
ghostscriptTuxCare:AlmaLinux:9.6 From an advisory covering 4 CVEs |
before 9.54.0-19.el9_6.tuxcare.els1 | 9.54.0-19.el9_6.tuxcare.els1 |
ghostscript-docTuxCare:AlmaLinux:9.6 From an advisory covering 4 CVEs |
before 9.54.0-19.el9_6.tuxcare.els1 | 9.54.0-19.el9_6.tuxcare.els1 |
ghostscript-gtkTuxCare:AlmaLinux:9.6 From an advisory covering 4 CVEs |
before 9.54.0-19.el9_6.tuxcare.els1 | 9.54.0-19.el9_6.tuxcare.els1 |
ghostscript-tools-dvipdfTuxCare:AlmaLinux:9.6 From an advisory covering 4 CVEs |
before 9.54.0-19.el9_6.tuxcare.els1 | 9.54.0-19.el9_6.tuxcare.els1 |
ghostscript-tools-fontsTuxCare:AlmaLinux:9.6 From an advisory covering 4 CVEs |
before 9.54.0-19.el9_6.tuxcare.els1 | 9.54.0-19.el9_6.tuxcare.els1 |
ghostscript-tools-printingTuxCare:AlmaLinux:9.6 From an advisory covering 4 CVEs |
before 9.54.0-19.el9_6.tuxcare.els1 | 9.54.0-19.el9_6.tuxcare.els1 |
ghostscript-x11TuxCare:AlmaLinux:9.6 From an advisory covering 4 CVEs |
before 9.54.0-19.el9_6.tuxcare.els1 | 9.54.0-19.el9_6.tuxcare.els1 |
libgsTuxCare:AlmaLinux:9.6 From an advisory covering 4 CVEs |
before 9.54.0-19.el9_6.tuxcare.els1 | 9.54.0-19.el9_6.tuxcare.els1 |
libgs-develTuxCare:AlmaLinux:9.6 From an advisory covering 4 CVEs |
before 9.54.0-19.el9_6.tuxcare.els1 | 9.54.0-19.el9_6.tuxcare.els1 |
ghostscriptDebian:12 |
before 10.0.0~dfsg-11+deb12u7, plus listed versions 10.0.0~dfsg-1110.0.0~dfsg-11+deb12u110.0.0~dfsg-11+deb12u210.0.0~dfsg-11+deb12u310.0.0~dfsg-11+deb12u410.0.0~dfsg-11+deb12u510.0.0~dfsg-11+deb12u6 |
10.0.0~dfsg-11+deb12u7 |
ghostscriptDebian:13 |
before 10.05.0~dfsg-1 | 10.05.0~dfsg-1 |
ghostscriptDebian:14 |
before 10.05.0~dfsg-1 | 10.05.0~dfsg-1 |
ghostscriptDebian:11 From an advisory covering 5 CVEs |
before 9.53.3~dfsg-7+deb11u10, plus listed versions 9.53.3~dfsg-79.53.3~dfsg-7+deb11u19.53.3~dfsg-7+deb11u29.53.3~dfsg-7+deb11u39.53.3~dfsg-7+deb11u4 Show 5 moreShow less9.53.3~dfsg-7+deb11u59.53.3~dfsg-7+deb11u69.53.3~dfsg-7+deb11u79.53.3~dfsg-7+deb11u89.53.3~dfsg-7+deb11u9 |
9.53.3~dfsg-7+deb11u10 |
ghostscriptDebian:12 From an advisory covering 7 CVEs |
before 10.0.0~dfsg-11+deb12u7, plus listed versions 10.0.0~dfsg-1110.0.0~dfsg-11+deb12u110.0.0~dfsg-11+deb12u210.0.0~dfsg-11+deb12u310.0.0~dfsg-11+deb12u410.0.0~dfsg-11+deb12u510.0.0~dfsg-11+deb12u6 |
10.0.0~dfsg-11+deb12u7 |
ghostscriptMageia:9 From an advisory covering 8 CVEs |
before 10.05.0-1.mga9 | 10.05.0-1.mga9 |
ghostscriptopenEuler:22.03-LTS-SP4 From an advisory covering 5 CVEs |
before 9.55.0-19.oe2203sp4 | 9.55.0-19.oe2203sp4 |
ghostscriptopenEuler:24.03-LTS From an advisory covering 6 CVEs |
before 9.56.1-15.oe2403 | 9.56.1-15.oe2403 |
ghostscriptopenEuler:24.03-LTS-SP1 From an advisory covering 6 CVEs |
before 9.56.1-15.oe2403sp1 | 9.56.1-15.oe2403sp1 |
ghostscriptopenEuler:20.03-LTS-SP4 From an advisory covering 4 CVEs |
before 9.52-21.oe2003sp4 | 9.52-21.oe2003sp4 |
ghostscriptopenEuler:22.03-LTS-SP3 From an advisory covering 5 CVEs |
before 9.55.0-18.oe2203sp3 | 9.55.0-18.oe2203sp3 |
ghostscriptSUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 4 CVEs |
before 9.52-23.89.1 | 9.52-23.89.1 |
ghostscriptSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 4 CVEs |
before 9.52-23.89.1 | 9.52-23.89.1 |
ghostscriptSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Manager Proxy 4.3 From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Manager Server 4.3 From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptSUSE:Enterprise Storage 7.1 From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptopenSUSE:Leap 15.6 From an advisory covering 4 CVEs |
before 9.52-150000.203.1 | 9.52-150000.203.1 |
ghostscriptUbuntu:Pro:16.04:LTS |
before 9.26~dfsg+0-0ubuntu0.16.04.14+esm9, plus listed versions 9.16~dfsg~0-0ubuntu39.16~dfsg~0-0ubuntu49.18~dfsg~0-0ubuntu19.18~dfsg~0-0ubuntu29.18~dfsg~0-0ubuntu2.2 Show 30 moreShow less9.18~dfsg~0-0ubuntu2.39.18~dfsg~0-0ubuntu2.49.18~dfsg~0-0ubuntu2.69.18~dfsg~0-0ubuntu2.79.18~dfsg~0-0ubuntu2.89.18~dfsg~0-0ubuntu2.99.25~dfsg+1-0ubuntu0.16.04.19.25~dfsg+1-0ubuntu0.16.04.29.25~dfsg+1-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.19.26~dfsg+0-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.49.26~dfsg+0-0ubuntu0.16.04.59.26~dfsg+0-0ubuntu0.16.04.69.26~dfsg+0-0ubuntu0.16.04.79.26~dfsg+0-0ubuntu0.16.04.89.26~dfsg+0-0ubuntu0.16.04.99.26~dfsg+0-0ubuntu0.16.04.109.26~dfsg+0-0ubuntu0.16.04.119.26~dfsg+0-0ubuntu0.16.04.129.26~dfsg+0-0ubuntu0.16.04.139.26~dfsg+0-0ubuntu0.16.04.149.26~dfsg+0-0ubuntu0.16.04.14+esm19.26~dfsg+0-0ubuntu0.16.04.14+esm29.26~dfsg+0-0ubuntu0.16.04.14+esm39.26~dfsg+0-0ubuntu0.16.04.14+esm49.26~dfsg+0-0ubuntu0.16.04.14+esm59.26~dfsg+0-0ubuntu0.16.04.14+esm69.26~dfsg+0-0ubuntu0.16.04.14+esm79.26~dfsg+0-0ubuntu0.16.04.14+esm8 |
9.26~dfsg+0-0ubuntu0.16.04.14+esm9 |
ghostscriptUbuntu:Pro:18.04:LTS |
before 9.26~dfsg+0-0ubuntu0.18.04.18+esm4, plus listed versions 9.21~dfsg+1-0ubuntu39.22~dfsg+1-0ubuntu19.22~dfsg+1-0ubuntu1.19.22~dfsg+1-0ubuntu1.29.25~dfsg+1-0ubuntu0.18.04.1 Show 21 moreShow less9.25~dfsg+1-0ubuntu0.18.04.29.26~dfsg+0-0ubuntu0.18.04.19.26~dfsg+0-0ubuntu0.18.04.39.26~dfsg+0-0ubuntu0.18.04.49.26~dfsg+0-0ubuntu0.18.04.59.26~dfsg+0-0ubuntu0.18.04.69.26~dfsg+0-0ubuntu0.18.04.79.26~dfsg+0-0ubuntu0.18.04.89.26~dfsg+0-0ubuntu0.18.04.99.26~dfsg+0-0ubuntu0.18.04.109.26~dfsg+0-0ubuntu0.18.04.119.26~dfsg+0-0ubuntu0.18.04.129.26~dfsg+0-0ubuntu0.18.04.139.26~dfsg+0-0ubuntu0.18.04.149.26~dfsg+0-0ubuntu0.18.04.159.26~dfsg+0-0ubuntu0.18.04.169.26~dfsg+0-0ubuntu0.18.04.179.26~dfsg+0-0ubuntu0.18.04.189.26~dfsg+0-0ubuntu0.18.04.18+esm19.26~dfsg+0-0ubuntu0.18.04.18+esm29.26~dfsg+0-0ubuntu0.18.04.18+esm3 |
9.26~dfsg+0-0ubuntu0.18.04.18+esm4 |
ghostscriptUbuntu:20.04:LTS |
before 9.50~dfsg-5ubuntu4.15, plus listed versions 9.27~dfsg+0-0ubuntu39.27~dfsg+0-0ubuntu49.50~dfsg-5ubuntu19.50~dfsg-5ubuntu29.50~dfsg-5ubuntu3 Show 15 moreShow less9.50~dfsg-5ubuntu49.50~dfsg-5ubuntu4.19.50~dfsg-5ubuntu4.29.50~dfsg-5ubuntu4.39.50~dfsg-5ubuntu4.49.50~dfsg-5ubuntu4.59.50~dfsg-5ubuntu4.69.50~dfsg-5ubuntu4.79.50~dfsg-5ubuntu4.89.50~dfsg-5ubuntu4.99.50~dfsg-5ubuntu4.109.50~dfsg-5ubuntu4.119.50~dfsg-5ubuntu4.129.50~dfsg-5ubuntu4.139.50~dfsg-5ubuntu4.14 |
9.50~dfsg-5ubuntu4.15 |
ghostscriptUbuntu:22.04:LTS |
before 9.55.0~dfsg1-0ubuntu5.11, plus listed versions 9.54.0~dfsg1-0ubuntu29.55.0~dfsg1-0ubuntu49.55.0~dfsg1-0ubuntu59.55.0~dfsg1-0ubuntu5.19.55.0~dfsg1-0ubuntu5.2 Show 7 moreShow less9.55.0~dfsg1-0ubuntu5.39.55.0~dfsg1-0ubuntu5.49.55.0~dfsg1-0ubuntu5.59.55.0~dfsg1-0ubuntu5.69.55.0~dfsg1-0ubuntu5.79.55.0~dfsg1-0ubuntu5.99.55.0~dfsg1-0ubuntu5.10 |
9.55.0~dfsg1-0ubuntu5.11 |
ghostscriptUbuntu:24.04:LTS |
before 10.02.1~dfsg1-0ubuntu7.5, plus listed versions 10.01.2~dfsg1-0ubuntu210.01.2~dfsg1-0ubuntu2.110.02.1~dfsg1-0ubuntu110.02.1~dfsg1-0ubuntu210.02.1~dfsg1-0ubuntu5 Show 5 moreShow less10.02.1~dfsg1-0ubuntu610.02.1~dfsg1-0ubuntu710.02.1~dfsg1-0ubuntu7.110.02.1~dfsg1-0ubuntu7.310.02.1~dfsg1-0ubuntu7.4 |
10.02.1~dfsg1-0ubuntu7.5 |
ghostscriptUbuntu:20.04:LTS From an advisory covering 7 CVEs |
before 9.50~dfsg-5ubuntu4.15, plus listed versions 9.27~dfsg+0-0ubuntu39.27~dfsg+0-0ubuntu49.50~dfsg-5ubuntu19.50~dfsg-5ubuntu29.50~dfsg-5ubuntu3 Show 15 moreShow less9.50~dfsg-5ubuntu49.50~dfsg-5ubuntu4.19.50~dfsg-5ubuntu4.29.50~dfsg-5ubuntu4.39.50~dfsg-5ubuntu4.49.50~dfsg-5ubuntu4.59.50~dfsg-5ubuntu4.69.50~dfsg-5ubuntu4.79.50~dfsg-5ubuntu4.89.50~dfsg-5ubuntu4.99.50~dfsg-5ubuntu4.109.50~dfsg-5ubuntu4.119.50~dfsg-5ubuntu4.129.50~dfsg-5ubuntu4.139.50~dfsg-5ubuntu4.14 |
9.50~dfsg-5ubuntu4.15 |
ghostscriptUbuntu:22.04:LTS From an advisory covering 7 CVEs |
before 9.55.0~dfsg1-0ubuntu5.11, plus listed versions 9.54.0~dfsg1-0ubuntu29.55.0~dfsg1-0ubuntu49.55.0~dfsg1-0ubuntu59.55.0~dfsg1-0ubuntu5.19.55.0~dfsg1-0ubuntu5.2 Show 7 moreShow less9.55.0~dfsg1-0ubuntu5.39.55.0~dfsg1-0ubuntu5.49.55.0~dfsg1-0ubuntu5.59.55.0~dfsg1-0ubuntu5.69.55.0~dfsg1-0ubuntu5.79.55.0~dfsg1-0ubuntu5.99.55.0~dfsg1-0ubuntu5.10 |
9.55.0~dfsg1-0ubuntu5.11 |
ghostscriptUbuntu:24.04:LTS From an advisory covering 7 CVEs |
before 10.02.1~dfsg1-0ubuntu7.5, plus listed versions 10.01.2~dfsg1-0ubuntu210.01.2~dfsg1-0ubuntu2.110.02.1~dfsg1-0ubuntu110.02.1~dfsg1-0ubuntu210.02.1~dfsg1-0ubuntu5 Show 5 moreShow less10.02.1~dfsg1-0ubuntu610.02.1~dfsg1-0ubuntu710.02.1~dfsg1-0ubuntu7.110.02.1~dfsg1-0ubuntu7.310.02.1~dfsg1-0ubuntu7.4 |
10.02.1~dfsg1-0ubuntu7.5 |
ghostscriptUbuntu:Pro:16.04:LTS From an advisory covering 8 CVEs |
before 9.26~dfsg+0-0ubuntu0.16.04.14+esm9, plus listed versions 9.16~dfsg~0-0ubuntu39.16~dfsg~0-0ubuntu49.18~dfsg~0-0ubuntu19.18~dfsg~0-0ubuntu29.18~dfsg~0-0ubuntu2.2 Show 30 moreShow less9.18~dfsg~0-0ubuntu2.39.18~dfsg~0-0ubuntu2.49.18~dfsg~0-0ubuntu2.69.18~dfsg~0-0ubuntu2.79.18~dfsg~0-0ubuntu2.89.18~dfsg~0-0ubuntu2.99.25~dfsg+1-0ubuntu0.16.04.19.25~dfsg+1-0ubuntu0.16.04.29.25~dfsg+1-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.19.26~dfsg+0-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.49.26~dfsg+0-0ubuntu0.16.04.59.26~dfsg+0-0ubuntu0.16.04.69.26~dfsg+0-0ubuntu0.16.04.79.26~dfsg+0-0ubuntu0.16.04.89.26~dfsg+0-0ubuntu0.16.04.99.26~dfsg+0-0ubuntu0.16.04.109.26~dfsg+0-0ubuntu0.16.04.119.26~dfsg+0-0ubuntu0.16.04.129.26~dfsg+0-0ubuntu0.16.04.139.26~dfsg+0-0ubuntu0.16.04.149.26~dfsg+0-0ubuntu0.16.04.14+esm19.26~dfsg+0-0ubuntu0.16.04.14+esm29.26~dfsg+0-0ubuntu0.16.04.14+esm39.26~dfsg+0-0ubuntu0.16.04.14+esm49.26~dfsg+0-0ubuntu0.16.04.14+esm59.26~dfsg+0-0ubuntu0.16.04.14+esm69.26~dfsg+0-0ubuntu0.16.04.14+esm79.26~dfsg+0-0ubuntu0.16.04.14+esm8 |
9.26~dfsg+0-0ubuntu0.16.04.14+esm9 |
ghostscriptUbuntu:Pro:18.04:LTS From an advisory covering 8 CVEs |
before 9.26~dfsg+0-0ubuntu0.18.04.18+esm4, plus listed versions 9.21~dfsg+1-0ubuntu39.22~dfsg+1-0ubuntu19.22~dfsg+1-0ubuntu1.19.22~dfsg+1-0ubuntu1.29.25~dfsg+1-0ubuntu0.18.04.1 Show 21 moreShow less9.25~dfsg+1-0ubuntu0.18.04.29.26~dfsg+0-0ubuntu0.18.04.19.26~dfsg+0-0ubuntu0.18.04.39.26~dfsg+0-0ubuntu0.18.04.49.26~dfsg+0-0ubuntu0.18.04.59.26~dfsg+0-0ubuntu0.18.04.69.26~dfsg+0-0ubuntu0.18.04.79.26~dfsg+0-0ubuntu0.18.04.89.26~dfsg+0-0ubuntu0.18.04.99.26~dfsg+0-0ubuntu0.18.04.109.26~dfsg+0-0ubuntu0.18.04.119.26~dfsg+0-0ubuntu0.18.04.129.26~dfsg+0-0ubuntu0.18.04.139.26~dfsg+0-0ubuntu0.18.04.149.26~dfsg+0-0ubuntu0.18.04.159.26~dfsg+0-0ubuntu0.18.04.169.26~dfsg+0-0ubuntu0.18.04.179.26~dfsg+0-0ubuntu0.18.04.189.26~dfsg+0-0ubuntu0.18.04.18+esm19.26~dfsg+0-0ubuntu0.18.04.18+esm29.26~dfsg+0-0ubuntu0.18.04.18+esm3 |
9.26~dfsg+0-0ubuntu0.18.04.18+esm4 |
ghostscriptUbuntu:Pro:20.04:LTS From an advisory covering 8 CVEs |
before 9.50~dfsg-5ubuntu4.15+esm1, plus listed versions 9.27~dfsg+0-0ubuntu39.27~dfsg+0-0ubuntu49.50~dfsg-5ubuntu19.50~dfsg-5ubuntu29.50~dfsg-5ubuntu3 Show 16 moreShow less9.50~dfsg-5ubuntu49.50~dfsg-5ubuntu4.19.50~dfsg-5ubuntu4.29.50~dfsg-5ubuntu4.39.50~dfsg-5ubuntu4.49.50~dfsg-5ubuntu4.59.50~dfsg-5ubuntu4.69.50~dfsg-5ubuntu4.79.50~dfsg-5ubuntu4.89.50~dfsg-5ubuntu4.99.50~dfsg-5ubuntu4.109.50~dfsg-5ubuntu4.119.50~dfsg-5ubuntu4.129.50~dfsg-5ubuntu4.139.50~dfsg-5ubuntu4.149.50~dfsg-5ubuntu4.15 |
9.50~dfsg-5ubuntu4.15+esm1 |
ghostscriptUbuntu:22.04:LTS From an advisory covering 8 CVEs |
before 9.55.0~dfsg1-0ubuntu5.12, plus listed versions 9.54.0~dfsg1-0ubuntu29.55.0~dfsg1-0ubuntu49.55.0~dfsg1-0ubuntu59.55.0~dfsg1-0ubuntu5.19.55.0~dfsg1-0ubuntu5.2 Show 8 moreShow less9.55.0~dfsg1-0ubuntu5.39.55.0~dfsg1-0ubuntu5.49.55.0~dfsg1-0ubuntu5.59.55.0~dfsg1-0ubuntu5.69.55.0~dfsg1-0ubuntu5.79.55.0~dfsg1-0ubuntu5.99.55.0~dfsg1-0ubuntu5.109.55.0~dfsg1-0ubuntu5.11 |
9.55.0~dfsg1-0ubuntu5.12 |
ghostscriptUbuntu:24.04:LTS From an advisory covering 8 CVEs |
before 10.02.1~dfsg1-0ubuntu7.7, plus listed versions 10.01.2~dfsg1-0ubuntu210.01.2~dfsg1-0ubuntu2.110.02.1~dfsg1-0ubuntu110.02.1~dfsg1-0ubuntu210.02.1~dfsg1-0ubuntu5 Show 7 moreShow less10.02.1~dfsg1-0ubuntu610.02.1~dfsg1-0ubuntu710.02.1~dfsg1-0ubuntu7.110.02.1~dfsg1-0ubuntu7.310.02.1~dfsg1-0ubuntu7.410.02.1~dfsg1-0ubuntu7.510.02.1~dfsg1-0ubuntu7.6 |
10.02.1~dfsg1-0ubuntu7.7 |
ghostscriptopenSUSE:Tumbleweed From an advisory covering 8 CVEs |
before 10.05.0-1.1 | 10.05.0-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-27836 is a critical vulnerability (CVSS 9.8) in Artifex Ghostscript, published March 15, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.60%, the 49th percentile. Fixed in ghostscript 10.05.0.
References
bugs.ghostscript.com/show_bug.cgi?id=708192
lists.debian.org/debian-lts-announce/2025/04/msg00014.html
nvd.nist.gov/vuln/detail/CVE-2025-27836
github.com/advisories/GHSA-96p6-38w3-wjpv
security.alpinelinux.org/vuln/CVE-2025-27836
docs.bell-sw.com/security/cves/CVE-2025-27836
Show 45 moreShow less
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1775120182.html
security-tracker.debian.org/tracker/CVE-2025-27836
advisories.mageia.org/MGASA-2025-0098.html
bugs.mageia.org/show_bug.cgi?id=34088
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1358
suse.com/support/update/announcement/2025/suse-su-20251118-1
bugzilla.suse.com/1240075
ubuntu.com/security/CVE-2025-27836
cve.org/CVERecord?id=CVE-2025-27836
lists.opensuse.org/archives/list/[email protected]/thread/GBB65P3KU5MBN7SLCFPCDEZ3Y2ACRGXP