GCVE - cpe:2.3:a:artifex:gpl_ghostscript:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:artifex:gpl_ghostscript:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Artifex (`0075fabc-cec9-5063-a004-04a5c9db1a9b`)
Product	Gpl Ghostscript (`a657a36f-664a-5042-bdac-558e28fdd277`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:ghostscript/ghostpdl`	purl2cpe	2026-06-01 10:14:59.836864
`pkg:ghostscript/gsdnld`	purl2cpe	2026-06-01 10:14:59.836868
`pkg:github/artifexsoftware/ghostpdl`	purl2cpe	2026-06-01 10:14:59.836872
`pkg:github/artifexsoftware/ghostpdl-downloads`	purl2cpe	2026-06-01 10:14:59.836875
`pkg:rpm/opensuse/ghostpdl`	purl2cpe	2026-06-01 10:14:59.836879

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-18284`	vulnerable	2026-06-08 05:11:07.394723	Details available Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving the 1Policy operator. Published: 2018-10-19T22:00:00.000Z Updated: 2024-08-05T11:08:21.327Z Open on db.gcve.eu Reference links http://git.ghostscript.com/?p=ghostpdl.git%3Bh=8d19fdf63f91f50466b08f23e2d93d37a4c5ea0b https://security.gentoo.org/glsa/201811-12 https://access.redhat.com/errata/RHSA-2018:3834 https://usn.ubuntu.com/3803-1/ https://www.debian.org/security/2018/dsa-4336	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16513`	vulnerable	2026-06-08 05:11:04.967361	Details available In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the setcolor function to crash the interpreter or possibly have unspecified other impact. Published: 2018-09-05T13:00:00.000Z Updated: 2024-08-05T10:24:32.739Z Open on db.gcve.eu Reference links https://security.gentoo.org/glsa/201811-12 https://usn.ubuntu.com/3768-1/ https://www.artifex.com/news/ghostscript-security-resolved/ https://bugs.ghostscript.com/show_bug.cgi?id=699655 https://www.debian.org/security/2018/dsa-4288	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16510`	vulnerable	2026-06-08 05:11:04.962851	Details available An issue was discovered in Artifex Ghostscript before 9.24. Incorrect exec stack handling in the "CS" and "SC" PDF primitives could be used by remote attackers able to supply crafted PDFs to crash the interpreter or possibly have unspecified other impact. Published: 2018-09-05T06:00:00.000Z Updated: 2024-08-05T10:24:32.860Z Open on db.gcve.eu Reference links http://openwall.com/lists/oss-security/2018/08/27/4 https://security.gentoo.org/glsa/201811-12 https://usn.ubuntu.com/3768-1/ http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=ea735ba37dc0fd5f5622d031830b9a559dec1cc9 https://usn.ubuntu.com/3773-1/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16509`	vulnerable	2026-06-08 05:11:04.961823	Details available An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction. Published: 2018-09-05T06:00:00.000Z Updated: 2024-08-05T10:24:32.894Z Open on db.gcve.eu Reference links http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=5516c614dc33662a2afdc377159f70218e67bde5 https://www.exploit-db.com/exploits/45369/ https://bugs.ghostscript.com/show_bug.cgi?id=699654 https://access.redhat.com/errata/RHSA-2018:2918 http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=79cccf641486a6595c43f1de1cd7ade696020a31	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-15911`	vulnerable	2026-06-08 05:11:03.800879	Details available In Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could use uninitialized memory access in the aesdecode operator to crash the interpreter or potentially execute code. Published: 2018-08-28T04:00:00.000Z Updated: 2024-08-05T10:10:04.990Z Open on db.gcve.eu Reference links https://security.gentoo.org/glsa/201811-12 https://usn.ubuntu.com/3768-1/ https://bugs.ghostscript.com/show_bug.cgi?id=699665 https://access.redhat.com/errata/RHSA-2018:3834 https://www.kb.cert.org/vuls/id/332928	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-15910`	vulnerable	2026-06-08 05:11:03.799893	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-15909`	vulnerable	2026-06-08 05:11:03.792811	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9601`	vulnerable	2026-06-08 05:08:24.113954	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-6629`	vulnerable	2026-06-08 05:04:57.286810	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2055`	vulnerable	2026-06-08 04:54:11.388082	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4897`	vulnerable	2026-06-08 04:51:50.402759	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3743`	vulnerable	2026-06-08 04:51:44.122375	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.