Ghostscript vulnerabilities

2 known vulnerabilities in Ghostscript from Artifex Software. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  Ghostscript: Untrusted Search Path

  CVE-2026-19547Sep 29, 2026Artifex Software

  Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for PostScript resource files in predictable paths under C:\\gs\\ that do not exist by default on Windows installat

• 9.8 Critical severity

  Ghostscript: Heap-based Buffer Overflow

  CVE-2026-39919Sep 15, 2026Artifex Software

  Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter (base/sjpx_openjpeg.c) that allows attackers to cause memory corruption by supplying a crafted PDF containing a JPEG 2000 image with mismatched compo