https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 06:03:43 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:83551 <p><strong>Affected:</strong> AlmaLinux:10: ghostscript, AlmaLinux:10: ghostscript-doc, AlmaLinux:10: ghostscript-tools-dvipdf, AlmaLinux:10: ghostscript-tools-fonts, AlmaLinux:10: ghostscript-tools-printing, AlmaLinux:10: libgs, AlmaLinux:10: libgs-devel</p> <p>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.</p> <p>Security Fix(es):</p> <p>* ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (CVE-2026-101258) * ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data (CVE-2026-103226)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: ghostscript, AlmaLinux:10: ghostscript-doc, AlmaLinux:10: ghostscript-tools-dvipdf, AlmaLinux:10: ghostscript-tools-fonts, AlmaLinux:10: ghostscript-tools-printing, AlmaLinux:10: libgs, AlmaLinux:10: libgs-devel</p> <p>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.</p> <p>Security Fix(es):</p> <p>* ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (CVE-2026-101258) * ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data (CVE-2026-103226)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:83551 https://cve.radiocsirt.org/vuln/bell-cve-2026-101258 <p><strong>Affected:</strong> Alpaquita:23: ghostscript, Alpaquita:25: ghostscript, Alpaquita:stream: ghostscript</p> <p><strong>Affected:</strong> Alpaquita:23: ghostscript, Alpaquita:25: ghostscript, Alpaquita:stream: ghostscript</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-101258 https://cve.radiocsirt.org/vuln/euvd-2026-384019 EUVD-2026-384019 https://cve.radiocsirt.org/vuln/euvd-2026-384019 https://cve.radiocsirt.org/vuln/fkie_cve-2026-101258 <p>A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory corruption in document parsing with disabling of internal path access controls at runtime. An attacker can deliver the document directly or through formats that delegate rendering to Ghostscript (for example EPS import or print conversion workflows). Successful exploitation can compromise confidentiality, integrity, and availability of data accessible to the process running Ghostscript.</p> <p>A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory corruption in document parsing with disabling of internal path access controls at runtime. An attacker can deliver the document directly or through formats that delegate rendering to Ghostscript (for example EPS import or print conversion workflows). Successful exploitation can compromise confidentiality, integrity, and availability of data accessible to the process running Ghostscript.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-101258 https://cve.radiocsirt.org/vuln/ghsa-g96p-c3cq-wp28 <p>A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory corruption in document parsing with disabling of internal path access controls at runtime. An attacker can deliver the document directly or through formats that delegate rendering to Ghostscript (for example EPS import or print conversion workflows). Successful exploitation can compromise confidentiality, integrity, and availability of data accessible to the process running Ghostscript.</p> <p>A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory corruption in document parsing with disabling of internal path access controls at runtime. An attacker can deliver the document directly or through formats that delegate rendering to Ghostscript (for example EPS import or print conversion workflows). Successful exploitation can compromise confidentiality, integrity, and availability of data accessible to the process running Ghostscript.</p> https://cve.radiocsirt.org/vuln/ghsa-g96p-c3cq-wp28 https://cve.radiocsirt.org/vuln/rhsa-2026:83551 <p>ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data</p> <p>ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data</p> https://cve.radiocsirt.org/vuln/rhsa-2026:83551 https://cve.radiocsirt.org/vuln/rlsa-2026:83551 <p><strong>Affected:</strong> Rocky Linux:10: ghostscript</p> <p>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.</p> <p>Security Fix(es):</p> <p>* ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (CVE-2026-101258)</p> <p>* ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data (CVE-2026-103226)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> Rocky Linux:10: ghostscript</p> <p>The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.</p> <p>Security Fix(es):</p> <p>* ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use-after-free (CVE-2026-101258)</p> <p>* ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data (CVE-2026-103226)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/rlsa-2026:83551 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-101258 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: ghostscript, Ubuntu:Pro:18.04:LTS: ghostscript, Ubuntu:Pro:20.04:LTS: ghostscript, Ubuntu:22.04:LTS: ghostscript, Ubuntu:24.04:LTS: ghostscript, Ubuntu:26.10: ghostscript, Ubuntu:26.04:LTS: ghostscript</p> <p>A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory corruption in document parsing with disabling of internal path access controls at runtime. An attacker can deliver the document directly or through formats that delegate rendering to Ghostscript (for example EPS import or print conversion workflows). Successful exploitation can compromise confidentiality, integrity, and availability of data accessible to the process running Ghostscript.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: ghostscript, Ubuntu:Pro:18.04:LTS: ghostscript, Ubuntu:Pro:20.04:LTS: ghostscript, Ubuntu:22.04:LTS: ghostscript, Ubuntu:24.04:LTS: ghostscript, Ubuntu:26.10: ghostscript, Ubuntu:26.04:LTS: ghostscript</p> <p>A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory corruption in document parsing with disabling of internal path access controls at runtime. An attacker can deliver the document directly or through formats that delegate rendering to Ghostscript (for example EPS import or print conversion workflows). Successful exploitation can compromise confidentiality, integrity, and availability of data accessible to the process running Ghostscript.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-101258