Open Source Ghostscript

Name: Open Source Ghostscript
Brand: Open Source

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical4high4medium2low

updated 2026-10-27

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-29510US	—	28.0% (98th)	Exploit	10.03.1	2024-07-03	< 10.03.1
CVE-2023-43115US	high8.8	5.96% (93rd)	Exploit	10.02.0	2023-09-18	< 10.02.0
CVE-2025-48708US	low3.3	0.32% (25th)	Exploit	b587663c623b4462f9e78686a31fd880207303ee	2025-05-23	< b587663c623b4462f9e78686a31fd880207303ee
CVE-2023-46751US	high7.5	1.53% (75th)	—	10.02.1	2023-12-06	< 10.02.1
CVE-2024-29509US	high8.8	1.45% (73rd)	—	10.03.0	2024-07-03	< 10.03.0
CVE-2024-33871US	—	1.43% (73rd)	—	10.03.1	2024-07-03	< 10.03.1
CVE-2024-29511US	—OT elevated	1.14% (66th)	—	10.03.1	2024-07-03	< 10.03.1
CVE-2024-29506US	high8.8	0.91% (60th)	—	10.03.0	2024-07-03	< 10.03.0
CVE-2026-39919US	critical9.8	0.85% (58th)	—	10.08.0	2026-09-15	< 10.08.0
CVE-2025-27832US	—	0.84% (58th)	—	10.05.0	2025-03-25	< 10.05.0
CVE-2024-29507US	—	0.72% (54th)	—	10.03.0	2024-07-03	< 10.03.0
CVE-2025-27837US	—	0.62% (49th)	—	10.05.0	2025-03-25	< 10.05.0
CVE-2025-27836US	—	0.60% (49th)	—	10.05.0	2025-03-25	< 10.05.0
CVE-2025-27831US	—	0.60% (49th)	—	10.05.0	2025-03-25	< 10.05.0
CVE-2024-33870US	—	0.52% (44th)	—	10.03.1	2024-07-03	< 10.03.1
CVE-2024-33869US	—	0.45% (39th)	—	10.03.1	2024-07-03	< 10.03.1
CVE-2024-29508US	low3.3	0.38% (31st)	—	10.03.0	2024-07-03	< 10.03.0
CVE-2023-52722US	—	0.33% (26th)	—	no fix	2024-04-28	≤ 10.01.0
CVE-2026-103226US	medium6.3	0.32% (25th)	—	no fix	2026-09-30	≤ 10.08.0
CVE-2025-27830US	—	0.31% (24th)	—	10.05.0	2025-03-25	< 10.05.0
CVE-2025-27835US	—	0.29% (22nd)	—	10.05.0	2025-03-25	< 10.05.0
CVE-2025-27834US	—	0.26% (18th)	—	10.05.0	2025-03-25	< 10.05.0
CVE-2025-27833US	—	0.22% (13th)	—	10.05.0	2025-03-25	< 10.05.0
CVE-2025-59799US	medium5.5	0.20% (10th)	—	10.06.0	2025-09-22	< 10.06.0
CVE-2025-59798US	medium5.5	0.20% (10th)	—	10.06.0	2025-09-22	< 10.06.0
CVE-2025-59801US	—	0.20% (10th)	—	10.06.0	2025-09-22	< 10.06.0
CVE-2025-46646US	—	0.18% (8th)	—	f14ea81e6c3d2f51593f23cdf13c4679a18f1a3f	2025-04-26	< f14ea81e6c3d2f51593f23cdf13c4679a18f1a3f
CVE-2025-59800US	medium5.5	0.18% (8th)	—	10.06.0	2025-09-22	< 10.06.0
CVE-2026-19547US	—	0.11% (1st)	—	10.08.0	2026-09-29	< 10.08.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')9 CVEs
CWE-121Stack-based Buffer Overflow6 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-122Heap-based Buffer Overflow3 CVEs
CWE-23Relative Path Traversal2 CVEs
CWE-787Out-of-bounds Write2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan