CyberSecBulletin

Artifex Software vulnerabilities

We track 3 vulnerabilities in Artifex Software products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 29, 2026.

3vulnerabilities
1critical
2high
0exploited
8.1average CVSS score

Latest Artifex Software vulnerabilities

  • 7.0 High severity

    Ghostscript: Untrusted Search Path

    CVE-2026-19547Artifex Software

    Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for PostScript resource files in predictable paths under C:\\gs\\ that do not exist by default on Windows installat

  • 9.8 Critical severity

    Ghostscript: Heap-based Buffer Overflow

    CVE-2026-39919Artifex Software

    Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter (base/sjpx_openjpeg.c) that allows attackers to cause memory corruption by supplying a crafted PDF containing a JPEG 2000 image with mismatched compo

  • 7.5 High severity

    MuPDF: Double Free

    CVE-2026-25556Artifex Software

    MuPDF versions 1.23.0 through 1.27.0 contain a double-free vulnerability in fz_fill_pixmap_from_display_list() when an exception occurs during display list rendering. The function accepts a caller-owned fz_pixmap pointer but incorrectly drops the pixmap in its