Threats affecting pkg:deb/debian/ghostscript

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.3	EPSS 0.3%	CVE-2026-103226Artifex Ghostscript · Stack-based Buffer Overflow Medium5.3EPSS 0.3%2026-09-30CVE Database V5CVE-2026-103226 CVE-2026-103226 is a stack-based buffer overflow vulnerability in Artifex Ghostscript affecting the function type1_callsubr in the Pdfwrite component. It affects versions 10.07 and 10.09. The vulnerability allows remote exploitation and public exploit code exists. Upgrading to version 10.08.0 addresses the issue. EPSS 0.3%Vulnerability	CVE Database V5	2026-09-30
Critical	9.8	EPSS 0.6%	CVE-2025-27836ghostscript · Classic Buffer Overflow Critical9.8EPSS 0.6%2025-03-25CVE Database V5CVE-2025-27836 An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c. EPSS 0.6%Vulnerability CWE-120	CVE Database V5	2025-03-25
High	7.8	EPSS 0.3%	CVE-2025-27830ghostscript · Classic Buffer Overflow High7.8EPSS 0.3%2025-03-25CVE Database V5CVE-2025-27830 An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c. EPSS 0.3%Vulnerability CWE-120	CVE Database V5	2025-03-25

Page 1 of 1