CVE catalog

CVE-2026-101258

A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript

[CVE catalog]

Severity
High · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.18% · Oct 22, 2026

A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory corruption in document parsing with disabling of internal path access controls at runtime. An attacker can deliver the document directly or through formats that delegate rendering to Ghostscript (for example EPS import or print conversion workflows). Successful exploitation can compromise confidentiality, integrity, and availability of data accessible to the process running Ghostscript.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianghostscriptsid10.08.0~dfsg-2fixed
Debianghostscriptforky10.08.0~dfsg-2fixed
Debianghostscripttrixie10.05.1~dfsg-1+deb13u1vulnerable
Debianghostscripttrixie-security10.05.1~dfsg-1+deb13u3fixed
Debianghostscriptbookworm10.0.0~dfsg-11+deb12u8vulnerable
Debianghostscriptbookworm-security10.0.0~dfsg-11+deb12u8vulnerable
Ubuntughostscriptpro9.27~dfsg+0-0ubuntu3vulnerable
Ubuntughostscriptpro9.27~dfsg+0-0ubuntu4vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu1vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu2vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu3vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.1vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.2vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.3vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.4vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.5vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.6vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.7vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.8vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.9vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.10vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.11vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.12vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.13vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.14vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.15vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.15+esm1vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.15+esm2vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.15+esm3fixed
Ubuntughostscript22.049.54.0~dfsg1-0ubuntu2vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu4vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.1vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.2vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.3vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.4vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.5vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.6vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.7vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.9vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.10vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.11vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.12vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.13vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.14vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.15fixed
Ubuntughostscript24.0410.01.2~dfsg1-0ubuntu2vulnerable
Ubuntughostscript24.0410.01.2~dfsg1-0ubuntu2.1vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu1vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu2vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu5vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu6vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu7vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu7.1vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu7.3vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu7.4vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu7.5vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu7.6vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu7.7vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu7.8vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu7.9vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu7.10fixed
Ubuntughostscript26.1010.06.0~dfsg-3ubuntu1vulnerable
Ubuntughostscript26.1010.07.1~dfsg-1ubuntu1vulnerable
Ubuntughostscript26.1010.07.1~dfsg-1ubuntu2vulnerable
Ubuntughostscript26.1010.07.1~dfsg-1ubuntu2.1fixed
Ubuntughostscript26.0410.05.0dfsg1-0ubuntu4vulnerable
Ubuntughostscript26.0410.05.0dfsg1-0ubuntu5vulnerable
Ubuntughostscript26.0410.06.0~dfsg-3ubuntu1vulnerable
Ubuntughostscript26.0410.06.0~dfsg-3ubuntu1.1vulnerable
Ubuntughostscript26.0410.06.0~dfsg-3ubuntu1.2fixed
Ubuntughostscriptpro9.27~dfsg+0-0ubuntu3vulnerable
Ubuntughostscriptpro9.27~dfsg+0-0ubuntu4vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu1vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu2vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu3vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.1vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.2vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.3vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.4vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.5vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.6vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.7vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.8vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.9vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.10vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.11vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.12vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.13vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.14vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.15vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.15+esm1vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.15+esm2vulnerable
Ubuntughostscriptpro9.50~dfsg-5ubuntu4.15+esm3vulnerable
Ubuntughostscript22.049.54.0~dfsg1-0ubuntu2vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu4vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.1vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.2vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.3vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.4vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.5vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.6vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.7vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.9vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.10vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.11vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.12vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.13vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.14vulnerable
Ubuntughostscript22.049.55.0~dfsg1-0ubuntu5.15vulnerable
Ubuntughostscript24.0410.01.2~dfsg1-0ubuntu2vulnerable
Ubuntughostscript24.0410.01.2~dfsg1-0ubuntu2.1vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu1vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu2vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu5vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu6vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu7vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu7.1vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu7.3vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu7.4vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu7.5vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu7.6vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu7.7vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu7.8vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu7.9vulnerable
Ubuntughostscript24.0410.02.1~dfsg1-0ubuntu7.10vulnerable
Ubuntughostscript26.1010.06.0~dfsg-3ubuntu1vulnerable
Ubuntughostscript26.1010.07.1~dfsg-1ubuntu1vulnerable
Ubuntughostscript26.1010.07.1~dfsg-1ubuntu2vulnerable
Ubuntughostscript26.1010.07.1~dfsg-1ubuntu2.1vulnerable
Ubuntughostscript26.0410.05.0dfsg1-0ubuntu4vulnerable
Ubuntughostscript26.0410.05.0dfsg1-0ubuntu5vulnerable
Ubuntughostscript26.0410.06.0~dfsg-3ubuntu1vulnerable
Ubuntughostscript26.0410.06.0~dfsg-3ubuntu1.1vulnerable
Ubuntughostscript26.0410.06.0~dfsg-3ubuntu1.2vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianghostscriptsourcesid10.08.0~dfsg-1not yet assignedNot reportedNot reported
Debianghostscriptsourceforky10.08.0~dfsg-1not yet assignedNot reportedNot reported
Debianghostscriptsourcetrixie10.05.1~dfsg-1+deb13u3not yet assignedNot reportedNot reported
Debianghostscriptsourcebookworm(unfixed)not yet assignedNot reportedNot reported
Ubuntughostscriptdebpro9.50~dfsg-5ubuntu4.15+esm3Not reportedUSN-8949-1Not reported
Ubuntughostscriptdeb22.049.55.0~dfsg1-0ubuntu5.15Not reportedUSN-8949-1Not reported
Ubuntughostscriptdeb24.0410.02.1~dfsg1-0ubuntu7.10Not reportedUSN-8949-1Not reported
Ubuntughostscriptdeb26.1010.07.1~dfsg-1ubuntu2.1Not reportedUSN-8949-1Not reported
Ubuntughostscriptdeb26.0410.06.0~dfsg-3ubuntu1.2Not reportedUSN-8949-1Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [ghostscript]Affected
    Details (4)

    • 10.0.0~dfsg-11+deb12u8 · amd64 · bookworm

      Affected

      nvd · ghostscript · debian · bookworm

    • 10.0.0~dfsg-11+deb12u8 · arm64 · bookworm

      Affected

      nvd · ghostscript · debian · bookworm

    • 10.0.0~dfsg-11+deb12u8 · amd64 · bookworm-security

      Affected

      nvd · ghostscript · debian · bookworm

    • 10.0.0~dfsg-11+deb12u8 · arm64 · bookworm-security

      Affected

      nvd · ghostscript · debian · bookworm

  • [ghostscript-doc]Affected

    Source package: [ghostscript]

    Details (4)

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm

      Affected

      nvd · ghostscript · debian · bookworm

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm

      Affected

      nvd · ghostscript · debian · bookworm

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm-security

      Affected

      nvd · ghostscript · debian · bookworm

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm-security

      Affected

      nvd · ghostscript · debian · bookworm

  • [ghostscript-x]Affected

    Source package: [ghostscript]

    Details (4)

    • 10.0.0~dfsg-11+deb12u8 · amd64 · bookworm

      Affected

      nvd · ghostscript · debian · bookworm

    • 10.0.0~dfsg-11+deb12u8 · arm64 · bookworm

      Affected

      nvd · ghostscript · debian · bookworm

    • 10.0.0~dfsg-11+deb12u8 · amd64 · bookworm-security

      Affected

      nvd · ghostscript · debian · bookworm

    • 10.0.0~dfsg-11+deb12u8 · arm64 · bookworm-security

      Affected

      nvd · ghostscript · debian · bookworm

  • [libgs10]Affected

    Source package: [ghostscript]

    Details (4)

    • 10.0.0~dfsg-11+deb12u8 · amd64 · bookworm

      Affected

      nvd · ghostscript · debian · bookworm

    • 10.0.0~dfsg-11+deb12u8 · arm64 · bookworm

      Affected

      nvd · ghostscript · debian · bookworm

    • 10.0.0~dfsg-11+deb12u8 · amd64 · bookworm-security

      Affected

      nvd · ghostscript · debian · bookworm

    • 10.0.0~dfsg-11+deb12u8 · arm64 · bookworm-security

      Affected

      nvd · ghostscript · debian · bookworm

  • [libgs10-common]Affected

    Source package: [ghostscript]

    Details (4)

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm

      Affected

      nvd · ghostscript · debian · bookworm

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm

      Affected

      nvd · ghostscript · debian · bookworm

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm-security

      Affected

      nvd · ghostscript · debian · bookworm

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm-security

      Affected

      nvd · ghostscript · debian · bookworm

  • [libgs9-common]Affected

    Source package: [ghostscript]

    Details (4)

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm

      Affected

      nvd · ghostscript · debian · bookworm

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm

      Affected

      nvd · ghostscript · debian · bookworm

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm-security

      Affected

      nvd · ghostscript · debian · bookworm

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm-security

      Affected

      nvd · ghostscript · debian · bookworm

  • [libgs-common]Affected

    Source package: [ghostscript]

    Details (4)

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm

      Affected

      nvd · ghostscript · debian · bookworm

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm

      Affected

      nvd · ghostscript · debian · bookworm

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm-security

      Affected

      nvd · ghostscript · debian · bookworm

    • 10.0.0~dfsg-11+deb12u8 · all · bookworm-security

      Affected

      nvd · ghostscript · debian · bookworm

  • [libgs-dev]Affected

    Source package: [ghostscript]

    Details (4)

    • 10.0.0~dfsg-11+deb12u8 · amd64 · bookworm

      Affected

      nvd · ghostscript · debian · bookworm

    • 10.0.0~dfsg-11+deb12u8 · arm64 · bookworm

      Affected

      nvd · ghostscript · debian · bookworm

    • 10.0.0~dfsg-11+deb12u8 · amd64 · bookworm-security

      Affected

      nvd · ghostscript · debian · bookworm

    • 10.0.0~dfsg-11+deb12u8 · arm64 · bookworm-security

      Affected

      nvd · ghostscript · debian · bookworm

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]