PatchTheCVECVE-2023-46751: An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.
CVE-2023-46751 is a high-severity flaw (CVSS 7.5) affecting ghostscript. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.
Why this priority
- High severity
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.5 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 1.5% (top 25%) |
| CISA exploited list | No |
| Weakness | CWE-416 |
| Published | 2023-12-06 |
| Last modified | 2026-11-02 |
Last updated 2026-11-02 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2023-46751?
ghostscript: upgrade to newer than 10.02.0. Exact commands for each OS are on this page.
Is CVE-2023-46751 being exploited?
CVE-2023-46751 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2023-46751 affect?
CVE-2023-46751 affects ghostscript. Severity is high (CVSS 7.5). An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the application via a dangling pointer.
How urgent is CVE-2023-46751?
Priority 50/100. High severity; Remotely exploitable, no login, no user action
Software pages
Related CVEs
- CVE-2021-45949 MEDIUM 5.5 UPGRADE MITIGATE Ghostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampled_data_finish (called from
- CVE-2023-36664 HIGH 7.8 UPGRADE MITIGATE Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix o
- CVE-2023-38559 MEDIUM 5.5 UPGRADE MITIGATE A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript
- CVE-2025-59800 MEDIUM 4.3 UPGRADE In Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdevpdfocr.c has an integer overflow that le
- CVE-2025-59799 MEDIUM 4.3 UPGRADE Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfmark_coerce_dest in devices/vector