Ghostscript vulnerabilities
Rick de Jager discovered that Ghostscript incorrectly handled memory under certain circumstances when processing PostScript documents. If a user or automated system were tricked into processing a specially crafted document, an attacker could possibly use this issue to bypass the sandbox and execute arbitrary code. (CVE-2026-101258) It was discovered that Ghostscript incorrectly handled memory when converting certain fonts. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to cause Ghostscript to crash, or possibly execute arbitrary code. (CVE-2026-103226) Paulos Yibelo discovered that Ghostscript did not properly va
Read at Ubuntu Security Notices
- Vendor
- Canonical
- Product
- ImageMagick / Ghostscript / FFmpeg / libxml2
Why it ranks 20 (Routine)
- Widely deployed vendor product (Canonical)
- Covered by 2 independent sources
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Ubuntu Security Notices (ubuntu.com)
- CVE-2026-101258 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-103226 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.