https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T04:03:53.780795+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:3999 ALSA-2024:3999 — Important: ghostscript security update 2026-10-04T04:03:53.800434+00:00

Affected: AlmaLinux:9: ghostscript, AlmaLinux:9: ghostscript-doc, AlmaLinux:9: ghostscript-tools-dvipdf, AlmaLinux:9: ghostscript-tools-fonts, AlmaLinux:9: ghostscript-tools-printing, AlmaLinux:9: ghostscript-x11, AlmaLinux:9: libgs, AlmaLinux:9: libgs-devel

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

* ghostscript: OPVP device arbitrary code execution via custom Driver library (CVE-2024-33871)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-05064 bdu:2024-05064 2026-10-04T04:03:53.800518+00:00 bdu:2024-05064 https://cve.radiocsirt.org/vuln/bell-cve-2024-33871 BELL-CVE-2024-33871 2026-10-04T04:03:53.800536+00:00

Affected: Alpaquita:23: ghostscript, Alpaquita:stream: ghostscript

 https://cve.radiocsirt.org/vuln/euvd-2026-5403 EUVD-2026-5403 2026-10-04T04:03:53.800555+00:00 EUVD-2026-5403 https://cve.radiocsirt.org/vuln/fkie_cve-2024-33871 fkie_cve-2024-33871 2026-10-04T04:03:53.800566+00:00

An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver library, exploitable via a crafted PostScript document. This occurs because the Driver parameter for opvp (and oprp) devices can have an arbitrary name for a dynamic library; this library is then loaded.

 https://cve.radiocsirt.org/vuln/ghsa-mq7h-fm69-h6xq GHSA-mq7h-fm69-h6xq 2026-10-04T04:03:53.800588+00:00

An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver library, exploitable via a crafted PostScript document. This occurs because the Driver parameter for opvp (and oprp) devices can have an arbitrary name for a dynamic library; this library is then loaded.

 https://cve.radiocsirt.org/vuln/gsd-2024-33871 gsd-2024-33871 2026-10-04T04:03:53.800603+00:00 gsd-2024-33871 https://cve.radiocsirt.org/vuln/oesa-2024-2454 OESA-2024-2454 — ghostscript security update 2026-10-04T04:03:53.800612+00:00

Affected: openEuler:22.03-LTS-SP1: ghostscript

Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fix(es): Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters.(CVE-2024-29507) An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver library, exploitable via a crafted PostScript document. This occurs because the Driver parameter for opvp (and oprp) devices can have an arbitrary name for a dynamic library; this library is then loaded.(CVE-2024-33871)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14090-1 openSUSE-SU-2024:14090-1 — ghostscript-10.03.1-1.1 on GA media 2026-10-04T04:03:53.800639+00:00

ghostscript-10.03.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2024:4014 RHSA-2024:4014 — Red Hat Security Advisory: ghostscript security update 2026-10-04T04:03:53.800659+00:00

ghostscript: OPVP device arbitrary code execution via custom Driver library

 https://cve.radiocsirt.org/vuln/suse-su-2024:2199-1 SUSE-SU-2024:2199-1 — Security update for ghostscript 2026-10-04T04:03:53.800674+00:00

Security update for ghostscript

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-33871 UBUNTU-CVE-2024-33871 2026-10-04T04:03:53.800688+00:00

Affected: Ubuntu:Pro:16.04:LTS: ghostscript, Ubuntu:20.04:LTS: ghostscript, Ubuntu:22.04:LTS: ghostscript, Ubuntu:24.04:LTS: ghostscript

An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver library, exploitable via a crafted PostScript document. This occurs because the Driver parameter for opvp (and oprp) devices can have an arbitrary name for a dynamic library; this library is then loaded.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1412 WID-SEC-W-2024-1412 — Ghostscript: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode 2026-10-04T04:03:53.800712+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Ghostscript ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.