ghostscript vulnerabilities and fixes

Recent CVEs affecting ghostscript, with upgrade or downgrade steps. 19 tracked.

ghostscript has 19 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 19. Most recent: 2025-09-22. Highest priority: CVE-2025-27832 (score 54/100).

• CVE-2025-59800 MEDIUM 4.3 UPGRADE In Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdevpdfocr.c has an integer overflow that le
• CVE-2025-59799 MEDIUM 4.3 UPGRADE Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfmark_coerce_dest in devices/vector
• CVE-2025-59798 MEDIUM 4.3 UPGRADE Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdf_write_cmap in devices/vector/gdev
• CVE-2025-48708 MEDIUM 4.0 UPGRADE gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitiz
• CVE-2025-46646 MEDIUM 4.5 UPGRADE In Artifex Ghostscript before 10.05.0, decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8 encoding
• CVE-2025-27837 CRITICAL 9.8 UPGRADE An issue was discovered in Artifex Ghostscript before 10.05.0
• CVE-2025-27836 CRITICAL 9.8 UPGRADE An issue was discovered in Artifex Ghostscript before 10.05.0
• CVE-2025-27835 HIGH 7.8 UPGRADE An issue was discovered in Artifex Ghostscript before 10.05.0
• CVE-2025-27834 HIGH 7.8 UPGRADE An issue was discovered in Artifex Ghostscript before 10.05.0
• CVE-2025-27833 HIGH 7.8 UPGRADE An issue was discovered in Artifex Ghostscript before 10.05.0
• CVE-2025-27832 CRITICAL 9.8 UPGRADE An issue was discovered in Artifex Ghostscript before 10.05.0
• CVE-2025-27831 CRITICAL 9.8 UPGRADE An issue was discovered in Artifex Ghostscript before 10.05.0
• CVE-2025-27830 HIGH 7.8 UPGRADE An issue was discovered in Artifex Ghostscript before 10.05.0
• CVE-2024-46956 HIGH 7.8 UPGRADE MITIGATE An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0
• CVE-2024-46955 MEDIUM 5.5 UPGRADE MITIGATE An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0
• CVE-2024-46954 HIGH 7.8 UPGRADE An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0
• CVE-2024-46953 HIGH 7.8 UPGRADE MITIGATE An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0
• CVE-2024-46952 HIGH 7.8 UPGRADE MITIGATE An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0
• CVE-2024-46951 HIGH 7.8 UPGRADE MITIGATE An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0

FAQ

How do I fix ghostscript vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is ghostscript being exploited right now?

None of the tracked ghostscript CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which ghostscript CVE should I patch first?

CVE-2025-27832 currently ranks highest (54/100): An issue was discovered in Artifex Ghostscript before 10.05.0.

RSS feed for ghostscript · ← Back to latest CVEs