Every CVE Search/ Get API key

CVE-2026-103226

Artifex Ghostscript Pdfwrite gdevpsfx.c type1_callsubr stack-based overflow

5.3 MediumFix available

A vulnerability was identified in Artifex Ghostscript up to 10.07.0. Affected is the function type1_callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite. The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. Upgrading to version 10.08.0 is able to address this issue. It is suggested to upgrade the affected component. A solution was implemented: "I've chosen to fix this slightly differently by using the defined macro in the font parsing loop rather than in the callsubr function, because this better matches the pattern of 'normal' usage."

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Passive

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
Low

Exploit likelihood

0.32%Down 0.1 points since Oct 1, 2026
90%50%10%1%

What each source reports

CVE List Score used 5.3

Artifex Ghostscript Pdfwrite gdevpsfx.c type1_callsubr stack-based overflow

A vulnerability was identified in Artifex Ghostscript up to 10.07.0. Affected is the function type1_callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite. The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. Upgrading to version 10.08.0 is able to address this issue. It is suggested to upgrade the affected component. A solution was implemented: "I've chosen to fix this slightly differently by using the defined macro in the font parsing loop rather than in the callsubr function, because this better matches the pattern of 'normal' usage."

Record
CVE-2026-103226
CVSS 4.0
5.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
CVSS 3.0
6.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
CVSS 2.0
7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C
Weakness
CWE-121, CWE-119
Updated
2026-11-02
EUVDEUVD-2026-89962 5.3

A vulnerability was identified in Artifex Ghostscript up to 10.07.0. Affected is the function type1_callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite. The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. Upgrading to version 10.08.0 is able to address this issue. It is suggested to upgrade the affected component. A solution was implemented: "I've chosen to fix this slightly differently by using the defined macro in the font parsing loop rather than in the callsubr function, because this better matches the pattern of 'normal' usage."

Record
EUVD-2026-89962
CVSS 4.0
5.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Updated
2026-11-02
GitHub AdvisoriesGHSA-f9vm-qh24-w7rf 2.1

A vulnerability was identified in Artifex Ghostscript up to 10.09.0. Affected is the function...

A vulnerability was identified in Artifex Ghostscript up to 10.09.0. Affected is the function type1_callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite. The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. It is suggested to install a patch to address this issue. A solution was implemented: "I've chosen to fix this slightly differently by using the defined macro in the font parsing loop rather than in the callsubr function, because this better matches the pattern of 'normal' usage."

Record
GHSA-f9vm-qh24-w7rf
CVSS 4.0
2.1 LowCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Weakness
CWE-119
Updated
2026-11-02
NVD 2.1

A vulnerability was identified in Artifex Ghostscript up to 10.07.0. Affected is the function type1_callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite. The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. Upgrading to version 10.08.0 is able to address this issue. It is suggested to upgrade the affected component. A solution was implemented: "I've chosen to fix this slightly differently by using the defined macro in the font parsing loop rather than in the callsubr function, because this better matches the pattern of 'normal' usage."

Record
CVE-2026-103226
CVSS 4.0
2.1 LowCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-119, CWE-121
Updated
2026-11-02
OSVDEBIAN-CVE-2026-103226 2.1

A vulnerability was identified in Artifex Ghostscript up to 10.07.0. Affected is the function type1_callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite. The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. Upgrading to version 10.08.0 is able to address this issue. It is suggested to upgrade the affected component. A solution was implemented: "I've chosen to fix this slightly differently by using the defined macro in the font parsing loop rather than in the callsubr function, because this better matches the pattern of 'normal' usage."

Record
DEBIAN-CVE-2026-103226
CVSS 4.0
2.1 LowCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVRHSA-2026:83551 7.8

Red Hat Security Advisory: ghostscript security update

Record
RHSA-2026:83551
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 17 moreShow less
OSVRHSA-2026:83552 7.8

Red Hat Security Advisory: ghostscript security update

Record
RHSA-2026:83552
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:83553 7.8

Red Hat Security Advisory: ghostscript security update

Record
RHSA-2026:83553
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:83551 7.8

Important: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

  • ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (CVE-2026-101258)

  • ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data (CVE-2026-103226)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:83551
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:83552 7.8

Important: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

  • ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (CVE-2026-101258)

  • ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data (CVE-2026-103226)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:83552
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:83553 7.8

Important: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

  • ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (CVE-2026-101258)

  • ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data (CVE-2026-103226)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:83553
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-103226 2.1

A vulnerability was identified in Artifex Ghostscript up to 10.07.0. Affected is the function type1_callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite. The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. Upgrading to version 10.08.0 is able to address this issue. It is suggested to upgrade the affected component. A solution was implemented: "I've chosen to fix this slightly differently by using the defined macro in the font parsing loop rather than in the callsubr function, because this better matches the pattern of 'normal' usage."

Record
UBUNTU-CVE-2026-103226
CVSS 4.0
2.1 LowCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVALSA-2026:83551 No score

Important: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

  • ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (CVE-2026-101258)
  • ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data (CVE-2026-103226)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:83551
Updated
2026-11-02
OSVALSA-2026:83552 No score

Important: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

  • ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (CVE-2026-101258)
  • ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data (CVE-2026-103226)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:83552
Updated
2026-11-02
OSVALSA-2026:83553 No score

Important: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

  • ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (CVE-2026-101258)
  • ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data (CVE-2026-103226)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:83553
Updated
2026-11-02
OSVCLSA-2026-1791294114 No score

ghostscript: Fix of 2 CVEs

  • CVE-2026-39919: fix heap buffer overflow in the JPEG 2000 output adapter when components are subsampled below 8 bits per sample
  • CVE-2026-103226: bound the control stack in the Type 1 to Type 2 font conversion used by pdfwrite
  • CVE-2025-27830: count every $Blend procedure entry in the length and bound the formatting of its numbers so the serialized procedure cannot overflow its buffer (upstream Bug 706923 and gs_snprintf)
Record
CLSA-2026-1791294114
Updated
2026-11-02
OSVCLSA-2026-1791463004 No score

ghostscript: Fix of 3 CVEs

  • CVE-2026-39919: heap buffer overflow in the JPEG 2000 output adapter with subsampled components (base/sjpx_openjpeg.c)
  • CVE-2026-103226: stack buffer overflow in the pdfwrite Type 1 to Type 2 font converter control stack (devices/vector/gdevpsfx.c)
Record
CLSA-2026-1791463004
Updated
2026-11-02
OSVopenSUSE-SU-2026:12128-1 No score

ghostscript-10.08.0-2.1 on GA media

These are all security issues fixed in the ghostscript-10.08.0-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:12128-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:22176-1 No score

Security update for ghostscript

This update for ghostscript fixes the following issues:

  • CVE-2026-101258: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (bsc#1284397).
  • CVE-2026-103226: stack-based buffer overflow in pdfwrite via crafted font data (bsc#1283917).
Record
openSUSE-SU-2026:22176-1
Updated
2026-11-02
OSVSUSE-SU-2026:24468-1 No score

Security update for ghostscript

This update for ghostscript fixes the following issues:

  • CVE-2026-101258: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (bsc#1284397).
  • CVE-2026-103226: stack-based buffer overflow in pdfwrite via crafted font data (bsc#1283917).
Record
SUSE-SU-2026:24468-1
Updated
2026-11-04
OSVSUSE-SU-2026:5039-1 No score

Security update for ghostscript

This update for ghostscript fixes the following issues:

  • CVE-2026-101258: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (bsc#1284397).
  • CVE-2026-103226: stack-based buffer overflow in pdfwrite via crafted font data (bsc#1283917).
Record
SUSE-SU-2026:5039-1
Updated
2026-11-03
OSVSUSE-SU-2026:5094-1 No score

Security update for ghostscript

This update for ghostscript fixes the following issues:

  • CVE-2026-101258: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (bsc#1284397).
  • CVE-2026-103226: stack-based buffer overflow in pdfwrite via crafted font data (bsc#1283917).
Record
SUSE-SU-2026:5094-1
Updated
2026-11-04
OSVUSN-8949-1 No score

ghostscript vulnerabilities

Rick de Jager discovered that Ghostscript incorrectly handled memory under certain circumstances when processing PostScript documents. If a user or automated system were tricked into processing a specially crafted document, an attacker could possibly use this issue to bypass the sandbox and execute arbitrary code. (CVE-2026-101258)

It was discovered that Ghostscript incorrectly handled memory when converting certain fonts. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to cause Ghostscript to crash, or possibly execute arbitrary code. (CVE-2026-103226)

Paulos Yibelo discovered that Ghostscript did not properly validate certain operands when loading fonts. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to bypass the sandbox and execute arbitrary code. (No CVE number)

Record
USN-8949-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ghostscript
AlmaLinux:10
From an advisory covering 2 CVEs
before 10.02.1-16.el10_2.3
10.02.1-16.el10_2.3
ghostscript-doc
AlmaLinux:10
From an advisory covering 2 CVEs
before 10.02.1-16.el10_2.3
10.02.1-16.el10_2.3
ghostscript-tools-dvipdf
AlmaLinux:10
From an advisory covering 2 CVEs
before 10.02.1-16.el10_2.3
10.02.1-16.el10_2.3
ghostscript-tools-fonts
AlmaLinux:10
From an advisory covering 2 CVEs
before 10.02.1-16.el10_2.3
10.02.1-16.el10_2.3
ghostscript-tools-printing
AlmaLinux:10
From an advisory covering 2 CVEs
before 10.02.1-16.el10_2.3
10.02.1-16.el10_2.3
libgs
AlmaLinux:10
From an advisory covering 2 CVEs
before 10.02.1-16.el10_2.3
10.02.1-16.el10_2.3
libgs-devel
AlmaLinux:10
From an advisory covering 2 CVEs
before 10.02.1-16.el10_2.3
10.02.1-16.el10_2.3
ghostscript
AlmaLinux:8
From an advisory covering 2 CVEs
before 9.27-19.el8_10
9.27-19.el8_10
ghostscript-doc
AlmaLinux:8
From an advisory covering 2 CVEs
before 9.27-19.el8_10
9.27-19.el8_10
ghostscript-tools-dvipdf
AlmaLinux:8
From an advisory covering 2 CVEs
before 9.27-19.el8_10
9.27-19.el8_10
Show 75 moreShow less
Affected packages
PackageAffectedFixed
ghostscript-tools-fonts
AlmaLinux:8
From an advisory covering 2 CVEs
before 9.27-19.el8_10
9.27-19.el8_10
ghostscript-tools-printing
AlmaLinux:8
From an advisory covering 2 CVEs
before 9.27-19.el8_10
9.27-19.el8_10
ghostscript-x11
AlmaLinux:8
From an advisory covering 2 CVEs
before 9.27-19.el8_10
9.27-19.el8_10
libgs
AlmaLinux:8
From an advisory covering 2 CVEs
before 9.27-19.el8_10
9.27-19.el8_10
libgs-devel
AlmaLinux:8
From an advisory covering 2 CVEs
before 9.27-19.el8_10
9.27-19.el8_10
ghostscript
AlmaLinux:9
From an advisory covering 2 CVEs
before 9.54.0-19.el9_8.3
9.54.0-19.el9_8.3
ghostscript-doc
AlmaLinux:9
From an advisory covering 2 CVEs
before 9.54.0-19.el9_8.3
9.54.0-19.el9_8.3
ghostscript-tools-dvipdf
AlmaLinux:9
From an advisory covering 2 CVEs
before 9.54.0-19.el9_8.3
9.54.0-19.el9_8.3
ghostscript-tools-fonts
AlmaLinux:9
From an advisory covering 2 CVEs
before 9.54.0-19.el9_8.3
9.54.0-19.el9_8.3
ghostscript-tools-printing
AlmaLinux:9
From an advisory covering 2 CVEs
before 9.54.0-19.el9_8.3
9.54.0-19.el9_8.3
ghostscript-x11
AlmaLinux:9
From an advisory covering 2 CVEs
before 9.54.0-19.el9_8.3
9.54.0-19.el9_8.3
libgs
AlmaLinux:9
From an advisory covering 2 CVEs
before 9.54.0-19.el9_8.3
9.54.0-19.el9_8.3
libgs-devel
AlmaLinux:9
From an advisory covering 2 CVEs
before 9.54.0-19.el9_8.3
9.54.0-19.el9_8.3
ghostscript
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
before 9.54.0-19.el9_6.tuxcare.els7
9.54.0-19.el9_6.tuxcare.els7
ghostscript-doc
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
before 9.54.0-19.el9_6.tuxcare.els7
9.54.0-19.el9_6.tuxcare.els7
ghostscript-gtk
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
before 9.54.0-19.el9_6.tuxcare.els7
9.54.0-19.el9_6.tuxcare.els7
ghostscript-tools-dvipdf
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
before 9.54.0-19.el9_6.tuxcare.els7
9.54.0-19.el9_6.tuxcare.els7
ghostscript-tools-fonts
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
before 9.54.0-19.el9_6.tuxcare.els7
9.54.0-19.el9_6.tuxcare.els7
ghostscript-tools-printing
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
before 9.54.0-19.el9_6.tuxcare.els7
9.54.0-19.el9_6.tuxcare.els7
ghostscript-x11
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
before 9.54.0-19.el9_6.tuxcare.els7
9.54.0-19.el9_6.tuxcare.els7
libgs
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
before 9.54.0-19.el9_6.tuxcare.els7
9.54.0-19.el9_6.tuxcare.els7
libgs-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 3 CVEs
before 9.54.0-19.el9_6.tuxcare.els7
9.54.0-19.el9_6.tuxcare.els7
ghostscript
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
before 9.54.0-11.el9_2.tuxcare.els15
9.54.0-11.el9_2.tuxcare.els15
ghostscript-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
before 9.54.0-11.el9_2.tuxcare.els15
9.54.0-11.el9_2.tuxcare.els15
ghostscript-gtk
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
before 9.54.0-11.el9_2.tuxcare.els15
9.54.0-11.el9_2.tuxcare.els15
ghostscript-tools-dvipdf
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
before 9.54.0-11.el9_2.tuxcare.els15
9.54.0-11.el9_2.tuxcare.els15
ghostscript-tools-fonts
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
before 9.54.0-11.el9_2.tuxcare.els15
9.54.0-11.el9_2.tuxcare.els15
ghostscript-tools-printing
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
before 9.54.0-11.el9_2.tuxcare.els15
9.54.0-11.el9_2.tuxcare.els15
ghostscript-x11
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
before 9.54.0-11.el9_2.tuxcare.els15
9.54.0-11.el9_2.tuxcare.els15
libgs
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
before 9.54.0-11.el9_2.tuxcare.els15
9.54.0-11.el9_2.tuxcare.els15
libgs-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
before 9.54.0-11.el9_2.tuxcare.els15
9.54.0-11.el9_2.tuxcare.els15
ghostscript
Debian:12
All versions, plus listed versions
10.0.0~dfsg-1110.0.0~dfsg-11+deb12u110.0.0~dfsg-11+deb12u210.0.0~dfsg-11+deb12u310.0.0~dfsg-11+deb12u4
Show 28 moreShow less
10.0.0~dfsg-11+deb12u510.0.0~dfsg-11+deb12u610.0.0~dfsg-11+deb12u710.0.0~dfsg-11+deb12u810.01.2~dfsg-110.02.0~dfsg-110.02.0~dfsg-210.02.1~dfsg-110.02.1~dfsg-210.02.1~dfsg-310.03.0~dfsg-110.03.1~dfsg-110.03.1~dfsg-210.03.1~dfsg~git20240518-110.04.0~dfsg-110.04.0~dfsg-210.05.0~dfsg-110.05.1~dfsg-110.05.1~dfsg-210.05.1~dfsg-310.06.0~dfsg-110.06.0~dfsg-210.06.0~dfsg-310.07.0~dfsg-110.07.0~dfsg-210.07.1~dfsg-110.08.0~dfsg-110.08.0~dfsg-2
None known
ghostscript
Debian:13
before 10.05.1~dfsg-1+deb13u3, plus listed versions
10.05.1~dfsg-110.05.1~dfsg-1+deb13u110.05.1~dfsg-1+deb13u2
10.05.1~dfsg-1+deb13u3
ghostscript
Debian:14
before 10.08.0~dfsg-1, plus listed versions
10.05.1~dfsg-110.05.1~dfsg-210.05.1~dfsg-310.06.0~dfsg-110.06.0~dfsg-2
Show 4 moreShow less
10.06.0~dfsg-310.07.0~dfsg-110.07.0~dfsg-210.07.1~dfsg-1
10.08.0~dfsg-1
ghostscript
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
before 0:10.02.1-16.el10_2.3
0:10.02.1-16.el10_2.3
libgs
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
before 0:10.02.1-16.el10_2.3
0:10.02.1-16.el10_2.3
ghostscript
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:9.27-19.el8_10
0:9.27-19.el8_10
libgs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
before 0:9.27-19.el8_10
0:9.27-19.el8_10
ghostscript
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
before 0:9.54.0-19.el9_8.3
0:9.54.0-19.el9_8.3
libgs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
before 0:9.54.0-19.el9_8.3
0:9.54.0-19.el9_8.3
ghostscript
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
before 0:9.54.0-19.el9_8.3
0:9.54.0-19.el9_8.3
ghostscript
Rocky Linux:10
From an advisory covering 2 CVEs
before 0:10.02.1-16.el10_2.3
0:10.02.1-16.el10_2.3
ghostscript
Rocky Linux:8
From an advisory covering 2 CVEs
before 0:9.27-19.el8_10
0:9.27-19.el8_10
ghostscript
Rocky Linux:9
From an advisory covering 2 CVEs
before 0:9.54.0-19.el9_8.3
0:9.54.0-19.el9_8.3
ghostscript
SUSE:Linux Enterprise Server 16.0
From an advisory covering 2 CVEs
before 10.08.0-160000.2.1
10.08.0-160000.2.1
ghostscript
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 2 CVEs
before 10.08.0-160000.2.1
10.08.0-160000.2.1
ghostscript
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 2 CVEs
before 9.52-150000.217.1
9.52-150000.217.1
ghostscript
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 2 CVEs
before 9.52-150000.217.1
9.52-150000.217.1
ghostscript
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 2 CVEs
before 9.52-150000.217.1
9.52-150000.217.1
ghostscript
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 2 CVEs
before 9.52-150000.217.1
9.52-150000.217.1
ghostscript
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 2 CVEs
before 9.52-150000.217.1
9.52-150000.217.1
ghostscript
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 2 CVEs
before 9.52-150000.217.1
9.52-150000.217.1
ghostscript
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 2 CVEs
before 9.52-150000.217.1
9.52-150000.217.1
ghostscript
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 2 CVEs
before 9.52-150000.217.1
9.52-150000.217.1
ghostscript
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 2 CVEs
before 9.52-150000.217.1
9.52-150000.217.1
ghostscript
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 2 CVEs
before 9.52-150000.217.1
9.52-150000.217.1
ghostscript
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 2 CVEs
before 9.52-150000.217.1
9.52-150000.217.1
ghostscript
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 2 CVEs
before 9.52-23.103.1
9.52-23.103.1
ghostscript
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 2 CVEs
before 9.52-23.103.1
9.52-23.103.1
ghostscript
Ubuntu:Pro:16.04:LTS
before 9.26~dfsg+0-0ubuntu0.16.04.14+esm11, plus listed versions
9.16~dfsg~0-0ubuntu39.16~dfsg~0-0ubuntu49.18~dfsg~0-0ubuntu19.18~dfsg~0-0ubuntu29.18~dfsg~0-0ubuntu2.2
Show 32 moreShow less
9.18~dfsg~0-0ubuntu2.39.18~dfsg~0-0ubuntu2.49.18~dfsg~0-0ubuntu2.69.18~dfsg~0-0ubuntu2.79.18~dfsg~0-0ubuntu2.89.18~dfsg~0-0ubuntu2.99.25~dfsg+1-0ubuntu0.16.04.19.25~dfsg+1-0ubuntu0.16.04.29.25~dfsg+1-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.19.26~dfsg+0-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.49.26~dfsg+0-0ubuntu0.16.04.59.26~dfsg+0-0ubuntu0.16.04.69.26~dfsg+0-0ubuntu0.16.04.79.26~dfsg+0-0ubuntu0.16.04.89.26~dfsg+0-0ubuntu0.16.04.99.26~dfsg+0-0ubuntu0.16.04.109.26~dfsg+0-0ubuntu0.16.04.119.26~dfsg+0-0ubuntu0.16.04.129.26~dfsg+0-0ubuntu0.16.04.139.26~dfsg+0-0ubuntu0.16.04.149.26~dfsg+0-0ubuntu0.16.04.14+esm19.26~dfsg+0-0ubuntu0.16.04.14+esm29.26~dfsg+0-0ubuntu0.16.04.14+esm39.26~dfsg+0-0ubuntu0.16.04.14+esm49.26~dfsg+0-0ubuntu0.16.04.14+esm59.26~dfsg+0-0ubuntu0.16.04.14+esm69.26~dfsg+0-0ubuntu0.16.04.14+esm79.26~dfsg+0-0ubuntu0.16.04.14+esm89.26~dfsg+0-0ubuntu0.16.04.14+esm99.26~dfsg+0-0ubuntu0.16.04.14+esm10
9.26~dfsg+0-0ubuntu0.16.04.14+esm11
ghostscript
Ubuntu:Pro:18.04:LTS
before 9.26~dfsg+0-0ubuntu0.18.04.18+esm6, plus listed versions
9.21~dfsg+1-0ubuntu39.22~dfsg+1-0ubuntu19.22~dfsg+1-0ubuntu1.19.22~dfsg+1-0ubuntu1.29.25~dfsg+1-0ubuntu0.18.04.1
Show 23 moreShow less
9.25~dfsg+1-0ubuntu0.18.04.29.26~dfsg+0-0ubuntu0.18.04.19.26~dfsg+0-0ubuntu0.18.04.39.26~dfsg+0-0ubuntu0.18.04.49.26~dfsg+0-0ubuntu0.18.04.59.26~dfsg+0-0ubuntu0.18.04.69.26~dfsg+0-0ubuntu0.18.04.79.26~dfsg+0-0ubuntu0.18.04.89.26~dfsg+0-0ubuntu0.18.04.99.26~dfsg+0-0ubuntu0.18.04.109.26~dfsg+0-0ubuntu0.18.04.119.26~dfsg+0-0ubuntu0.18.04.129.26~dfsg+0-0ubuntu0.18.04.139.26~dfsg+0-0ubuntu0.18.04.149.26~dfsg+0-0ubuntu0.18.04.159.26~dfsg+0-0ubuntu0.18.04.169.26~dfsg+0-0ubuntu0.18.04.179.26~dfsg+0-0ubuntu0.18.04.189.26~dfsg+0-0ubuntu0.18.04.18+esm19.26~dfsg+0-0ubuntu0.18.04.18+esm29.26~dfsg+0-0ubuntu0.18.04.18+esm39.26~dfsg+0-0ubuntu0.18.04.18+esm49.26~dfsg+0-0ubuntu0.18.04.18+esm5
9.26~dfsg+0-0ubuntu0.18.04.18+esm6
ghostscript
Ubuntu:Pro:20.04:LTS
before 9.50~dfsg-5ubuntu4.15+esm3, plus listed versions
9.27~dfsg+0-0ubuntu39.27~dfsg+0-0ubuntu49.50~dfsg-5ubuntu19.50~dfsg-5ubuntu29.50~dfsg-5ubuntu3
Show 18 moreShow less
9.50~dfsg-5ubuntu49.50~dfsg-5ubuntu4.19.50~dfsg-5ubuntu4.29.50~dfsg-5ubuntu4.39.50~dfsg-5ubuntu4.49.50~dfsg-5ubuntu4.59.50~dfsg-5ubuntu4.69.50~dfsg-5ubuntu4.79.50~dfsg-5ubuntu4.89.50~dfsg-5ubuntu4.99.50~dfsg-5ubuntu4.109.50~dfsg-5ubuntu4.119.50~dfsg-5ubuntu4.129.50~dfsg-5ubuntu4.139.50~dfsg-5ubuntu4.149.50~dfsg-5ubuntu4.159.50~dfsg-5ubuntu4.15+esm19.50~dfsg-5ubuntu4.15+esm2
9.50~dfsg-5ubuntu4.15+esm3
ghostscript
Ubuntu:22.04:LTS
before 9.55.0~dfsg1-0ubuntu5.15, plus listed versions
9.54.0~dfsg1-0ubuntu29.55.0~dfsg1-0ubuntu49.55.0~dfsg1-0ubuntu59.55.0~dfsg1-0ubuntu5.19.55.0~dfsg1-0ubuntu5.2
Show 11 moreShow less
9.55.0~dfsg1-0ubuntu5.39.55.0~dfsg1-0ubuntu5.49.55.0~dfsg1-0ubuntu5.59.55.0~dfsg1-0ubuntu5.69.55.0~dfsg1-0ubuntu5.79.55.0~dfsg1-0ubuntu5.99.55.0~dfsg1-0ubuntu5.109.55.0~dfsg1-0ubuntu5.119.55.0~dfsg1-0ubuntu5.129.55.0~dfsg1-0ubuntu5.139.55.0~dfsg1-0ubuntu5.14
9.55.0~dfsg1-0ubuntu5.15
ghostscript
Ubuntu:24.04:LTS
before 10.02.1~dfsg1-0ubuntu7.10, plus listed versions
10.01.2~dfsg1-0ubuntu210.01.2~dfsg1-0ubuntu2.110.02.1~dfsg1-0ubuntu110.02.1~dfsg1-0ubuntu210.02.1~dfsg1-0ubuntu5
Show 10 moreShow less
10.02.1~dfsg1-0ubuntu610.02.1~dfsg1-0ubuntu710.02.1~dfsg1-0ubuntu7.110.02.1~dfsg1-0ubuntu7.310.02.1~dfsg1-0ubuntu7.410.02.1~dfsg1-0ubuntu7.510.02.1~dfsg1-0ubuntu7.610.02.1~dfsg1-0ubuntu7.710.02.1~dfsg1-0ubuntu7.810.02.1~dfsg1-0ubuntu7.9
10.02.1~dfsg1-0ubuntu7.10
ghostscript
Ubuntu:26.10
before 10.07.1~dfsg-1ubuntu2.1, plus listed versions
10.06.0~dfsg-3ubuntu110.07.1~dfsg-1ubuntu110.07.1~dfsg-1ubuntu2
10.07.1~dfsg-1ubuntu2.1
ghostscript
Ubuntu:26.04:LTS
before 10.06.0~dfsg-3ubuntu1.2, plus listed versions
10.05.0dfsg1-0ubuntu410.05.0dfsg1-0ubuntu510.06.0~dfsg-3ubuntu110.06.0~dfsg-3ubuntu1.1
10.06.0~dfsg-3ubuntu1.2
ghostscript
Ubuntu:Pro:16.04:LTS
From an advisory covering 2 CVEs
before 9.26~dfsg+0-0ubuntu0.16.04.14+esm11, plus listed versions
9.16~dfsg~0-0ubuntu39.16~dfsg~0-0ubuntu49.18~dfsg~0-0ubuntu19.18~dfsg~0-0ubuntu29.18~dfsg~0-0ubuntu2.2
Show 32 moreShow less
9.18~dfsg~0-0ubuntu2.39.18~dfsg~0-0ubuntu2.49.18~dfsg~0-0ubuntu2.69.18~dfsg~0-0ubuntu2.79.18~dfsg~0-0ubuntu2.89.18~dfsg~0-0ubuntu2.99.25~dfsg+1-0ubuntu0.16.04.19.25~dfsg+1-0ubuntu0.16.04.29.25~dfsg+1-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.19.26~dfsg+0-0ubuntu0.16.04.39.26~dfsg+0-0ubuntu0.16.04.49.26~dfsg+0-0ubuntu0.16.04.59.26~dfsg+0-0ubuntu0.16.04.69.26~dfsg+0-0ubuntu0.16.04.79.26~dfsg+0-0ubuntu0.16.04.89.26~dfsg+0-0ubuntu0.16.04.99.26~dfsg+0-0ubuntu0.16.04.109.26~dfsg+0-0ubuntu0.16.04.119.26~dfsg+0-0ubuntu0.16.04.129.26~dfsg+0-0ubuntu0.16.04.139.26~dfsg+0-0ubuntu0.16.04.149.26~dfsg+0-0ubuntu0.16.04.14+esm19.26~dfsg+0-0ubuntu0.16.04.14+esm29.26~dfsg+0-0ubuntu0.16.04.14+esm39.26~dfsg+0-0ubuntu0.16.04.14+esm49.26~dfsg+0-0ubuntu0.16.04.14+esm59.26~dfsg+0-0ubuntu0.16.04.14+esm69.26~dfsg+0-0ubuntu0.16.04.14+esm79.26~dfsg+0-0ubuntu0.16.04.14+esm89.26~dfsg+0-0ubuntu0.16.04.14+esm99.26~dfsg+0-0ubuntu0.16.04.14+esm10
9.26~dfsg+0-0ubuntu0.16.04.14+esm11
ghostscript
Ubuntu:Pro:18.04:LTS
From an advisory covering 2 CVEs
before 9.26~dfsg+0-0ubuntu0.18.04.18+esm6, plus listed versions
9.21~dfsg+1-0ubuntu39.22~dfsg+1-0ubuntu19.22~dfsg+1-0ubuntu1.19.22~dfsg+1-0ubuntu1.29.25~dfsg+1-0ubuntu0.18.04.1
Show 23 moreShow less
9.25~dfsg+1-0ubuntu0.18.04.29.26~dfsg+0-0ubuntu0.18.04.19.26~dfsg+0-0ubuntu0.18.04.39.26~dfsg+0-0ubuntu0.18.04.49.26~dfsg+0-0ubuntu0.18.04.59.26~dfsg+0-0ubuntu0.18.04.69.26~dfsg+0-0ubuntu0.18.04.79.26~dfsg+0-0ubuntu0.18.04.89.26~dfsg+0-0ubuntu0.18.04.99.26~dfsg+0-0ubuntu0.18.04.109.26~dfsg+0-0ubuntu0.18.04.119.26~dfsg+0-0ubuntu0.18.04.129.26~dfsg+0-0ubuntu0.18.04.139.26~dfsg+0-0ubuntu0.18.04.149.26~dfsg+0-0ubuntu0.18.04.159.26~dfsg+0-0ubuntu0.18.04.169.26~dfsg+0-0ubuntu0.18.04.179.26~dfsg+0-0ubuntu0.18.04.189.26~dfsg+0-0ubuntu0.18.04.18+esm19.26~dfsg+0-0ubuntu0.18.04.18+esm29.26~dfsg+0-0ubuntu0.18.04.18+esm39.26~dfsg+0-0ubuntu0.18.04.18+esm49.26~dfsg+0-0ubuntu0.18.04.18+esm5
9.26~dfsg+0-0ubuntu0.18.04.18+esm6
ghostscript
Ubuntu:Pro:20.04:LTS
From an advisory covering 2 CVEs
before 9.50~dfsg-5ubuntu4.15+esm3, plus listed versions
9.27~dfsg+0-0ubuntu39.27~dfsg+0-0ubuntu49.50~dfsg-5ubuntu19.50~dfsg-5ubuntu29.50~dfsg-5ubuntu3
Show 18 moreShow less
9.50~dfsg-5ubuntu49.50~dfsg-5ubuntu4.19.50~dfsg-5ubuntu4.29.50~dfsg-5ubuntu4.39.50~dfsg-5ubuntu4.49.50~dfsg-5ubuntu4.59.50~dfsg-5ubuntu4.69.50~dfsg-5ubuntu4.79.50~dfsg-5ubuntu4.89.50~dfsg-5ubuntu4.99.50~dfsg-5ubuntu4.109.50~dfsg-5ubuntu4.119.50~dfsg-5ubuntu4.129.50~dfsg-5ubuntu4.139.50~dfsg-5ubuntu4.149.50~dfsg-5ubuntu4.159.50~dfsg-5ubuntu4.15+esm19.50~dfsg-5ubuntu4.15+esm2
9.50~dfsg-5ubuntu4.15+esm3
ghostscript
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
before 9.55.0~dfsg1-0ubuntu5.15, plus listed versions
9.54.0~dfsg1-0ubuntu29.55.0~dfsg1-0ubuntu49.55.0~dfsg1-0ubuntu59.55.0~dfsg1-0ubuntu5.19.55.0~dfsg1-0ubuntu5.2
Show 11 moreShow less
9.55.0~dfsg1-0ubuntu5.39.55.0~dfsg1-0ubuntu5.49.55.0~dfsg1-0ubuntu5.59.55.0~dfsg1-0ubuntu5.69.55.0~dfsg1-0ubuntu5.79.55.0~dfsg1-0ubuntu5.99.55.0~dfsg1-0ubuntu5.109.55.0~dfsg1-0ubuntu5.119.55.0~dfsg1-0ubuntu5.129.55.0~dfsg1-0ubuntu5.139.55.0~dfsg1-0ubuntu5.14
9.55.0~dfsg1-0ubuntu5.15
ghostscript
Ubuntu:24.04:LTS
From an advisory covering 2 CVEs
before 10.02.1~dfsg1-0ubuntu7.10, plus listed versions
10.01.2~dfsg1-0ubuntu210.01.2~dfsg1-0ubuntu2.110.02.1~dfsg1-0ubuntu110.02.1~dfsg1-0ubuntu210.02.1~dfsg1-0ubuntu5
Show 10 moreShow less
10.02.1~dfsg1-0ubuntu610.02.1~dfsg1-0ubuntu710.02.1~dfsg1-0ubuntu7.110.02.1~dfsg1-0ubuntu7.310.02.1~dfsg1-0ubuntu7.410.02.1~dfsg1-0ubuntu7.510.02.1~dfsg1-0ubuntu7.610.02.1~dfsg1-0ubuntu7.710.02.1~dfsg1-0ubuntu7.810.02.1~dfsg1-0ubuntu7.9
10.02.1~dfsg1-0ubuntu7.10
ghostscript
Ubuntu:26.10
From an advisory covering 2 CVEs
before 10.07.1~dfsg-1ubuntu2.1, plus listed versions
10.06.0~dfsg-3ubuntu110.07.1~dfsg-1ubuntu110.07.1~dfsg-1ubuntu2
10.07.1~dfsg-1ubuntu2.1
ghostscript
Ubuntu:26.04:LTS
From an advisory covering 2 CVEs
before 10.06.0~dfsg-3ubuntu1.2, plus listed versions
10.05.0dfsg1-0ubuntu410.05.0dfsg1-0ubuntu510.06.0~dfsg-3ubuntu110.06.0~dfsg-3ubuntu1.1
10.06.0~dfsg-3ubuntu1.2
ghostscript
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
before 10.08.0-2.1
10.08.0-2.1
ghostscript
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
before 10.08.0-160000.2.1
10.08.0-160000.2.1

History

History
RecordedChangedSources
affected
affected, aliases, referencesOSV
affected, aliases, facts, referencesOSV
affected, aliases, referencesOSV
affected, aliases, references
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-103226 is a medium vulnerability (CVSS 5.3) in Artifex Ghostscript, published September 30, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 24th percentile. Fixed in ghostscript 10.05.1~dfsg-1+deb13u3.

References

Show 44 moreShow less
MoveEnter Open