7.3
High
CVE-2018-16863 It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509
Description
It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of the flaw and bypass the -dSAFER protection to, for example, execute arbitrary shell commands via a specially crafted PostScript document. This only affects ghostscript 9.07 as shipped with Red Hat Enterprise Linux 7.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ghostscript | 9.07 | No fix stated |
Other CVEs of ghostscript
The 15 CVEs of ghostscript →
CVE-2026-103226
A vulnerability was identified in Artifex Ghostscript up to 10.07.0
5.3
Medium
CVE-2025-59800
In Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdevpdfocr.c has an integer overflow that leads to a…
4.3
Medium
CVE-2025-59799
Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfmark_coerce_dest in…
4.3
Medium
CVE-2025-59798
Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdf_write_cmap in devices/vector/gdevpdtw.c
4.3
Medium