https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 04:03:15 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:3999 <p><strong>Affected:</strong> AlmaLinux:9: ghostscript, AlmaLinux:9: ghostscript-doc, AlmaLinux:9: ghostscript-tools-dvipdf, AlmaLinux:9: ghostscript-tools-fonts, AlmaLinux:9: ghostscript-tools-printing, AlmaLinux:9: ghostscript-x11, AlmaLinux:9: libgs, AlmaLinux:9: libgs-devel</p> <p>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.</p> <p>Security Fix(es):</p> <p>* ghostscript: OPVP device arbitrary code execution via custom Driver library (CVE-2024-33871)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: ghostscript, AlmaLinux:9: ghostscript-doc, AlmaLinux:9: ghostscript-tools-dvipdf, AlmaLinux:9: ghostscript-tools-fonts, AlmaLinux:9: ghostscript-tools-printing, AlmaLinux:9: ghostscript-x11, AlmaLinux:9: libgs, AlmaLinux:9: libgs-devel</p> <p>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.</p> <p>Security Fix(es):</p> <p>* ghostscript: OPVP device arbitrary code execution via custom Driver library (CVE-2024-33871)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:3999 https://cve.radiocsirt.org/vuln/bdu:2024-05064 bdu:2024-05064 https://cve.radiocsirt.org/vuln/bdu:2024-05064 https://cve.radiocsirt.org/vuln/bell-cve-2024-33871 <p><strong>Affected:</strong> Alpaquita:23: ghostscript, Alpaquita:stream: ghostscript</p> <p><strong>Affected:</strong> Alpaquita:23: ghostscript, Alpaquita:stream: ghostscript</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-33871 https://cve.radiocsirt.org/vuln/euvd-2026-5403 EUVD-2026-5403 https://cve.radiocsirt.org/vuln/euvd-2026-5403 https://cve.radiocsirt.org/vuln/fkie_cve-2024-33871 <p>An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver library, exploitable via a crafted PostScript document. This occurs because the Driver parameter for opvp (and oprp) devices can have an arbitrary name for a dynamic library; this library is then loaded.</p> <p>An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver library, exploitable via a crafted PostScript document. This occurs because the Driver parameter for opvp (and oprp) devices can have an arbitrary name for a dynamic library; this library is then loaded.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-33871 https://cve.radiocsirt.org/vuln/ghsa-mq7h-fm69-h6xq <p>An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver library, exploitable via a crafted PostScript document. This occurs because the Driver parameter for opvp (and oprp) devices can have an arbitrary name for a dynamic library; this library is then loaded.</p> <p>An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver library, exploitable via a crafted PostScript document. This occurs because the Driver parameter for opvp (and oprp) devices can have an arbitrary name for a dynamic library; this library is then loaded.</p> https://cve.radiocsirt.org/vuln/ghsa-mq7h-fm69-h6xq https://cve.radiocsirt.org/vuln/gsd-2024-33871 gsd-2024-33871 https://cve.radiocsirt.org/vuln/gsd-2024-33871 https://cve.radiocsirt.org/vuln/oesa-2024-2454 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP1: ghostscript</p> <p>Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fix(es): Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters.(CVE-2024-29507) An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver library, exploitable via a crafted PostScript document. This occurs because the Driver parameter for opvp (and oprp) devices can have an arbitrary name for a dynamic library; this library is then loaded.(CVE-2024-33871)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP1: ghostscript</p> <p>Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fix(es): Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters.(CVE-2024-29507) An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver library, exploitable via a crafted PostScript document. This occurs because the Driver parameter for opvp (and oprp) devices can have an arbitrary name for a dynamic library; this library is then loaded.(CVE-2024-33871)</p> https://cve.radiocsirt.org/vuln/oesa-2024-2454 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14090-1 <p>ghostscript-10.03.1-1.1 on GA media</p> <p>ghostscript-10.03.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14090-1 https://cve.radiocsirt.org/vuln/rhsa-2024:4014 <p>ghostscript: OPVP device arbitrary code execution via custom Driver library</p> <p>ghostscript: OPVP device arbitrary code execution via custom Driver library</p> https://cve.radiocsirt.org/vuln/rhsa-2024:4014 https://cve.radiocsirt.org/vuln/suse-su-2024:2199-1 <p>Security update for ghostscript</p> <p>Security update for ghostscript</p> https://cve.radiocsirt.org/vuln/suse-su-2024:2199-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-33871 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: ghostscript, Ubuntu:20.04:LTS: ghostscript, Ubuntu:22.04:LTS: ghostscript, Ubuntu:24.04:LTS: ghostscript</p> <p>An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver library, exploitable via a crafted PostScript document. This occurs because the Driver parameter for opvp (and oprp) devices can have an arbitrary name for a dynamic library; this library is then loaded.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: ghostscript, Ubuntu:20.04:LTS: ghostscript, Ubuntu:22.04:LTS: ghostscript, Ubuntu:24.04:LTS: ghostscript</p> <p>An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver library, exploitable via a crafted PostScript document. This occurs because the Driver parameter for opvp (and oprp) devices can have an arbitrary name for a dynamic library; this library is then loaded.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-33871 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1412 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Ghostscript ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Ghostscript ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1412