A flaw was found in ghostscript. This vulnerability allows a remote attacker to trigger an application crash leading to a Denial of Service (DoS) or potentially execute arbitrary code by tricking a user or service into processing a specially crafted file. The issue stems from a stack-based buffer overflow in the pdfwrite component during Type 1 font processing.
Last checked: 2026-10-15 18:25 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-30 14:24 UTC)
Fix evidence last checked: 2026-10-24 08:47 UTC
AlmaLinux 10
ALSA-2026:83551 · Published 2026-10-15
AlmaLinux 8
ALSA-2026:83552 · Published 2026-10-15
AlmaLinux 9
ALSA-2026:83553 · Published 2026-10-15
Debian 13 (Trixie)
DSA-6550-1 · Published 2026-10-10
Oracle Linux 10
ELSA-2026-83551 · Published 2026-10-15
Oracle Linux 8
ELSA-2026-83552 · Published 2026-10-15
Oracle Linux 9
ELSA-2026-83553 · Published 2026-10-15
Red Hat Enterprise Linux 10
RHSA-2026:83551 · Published 2026-10-15
Red Hat Enterprise Linux 8
RHSA-2026:83552 · Published 2026-10-15
Red Hat Enterprise Linux 9
RHSA-2026:83553 · Published 2026-10-15
Rocky Linux 10
RLSA-2026:83551 · Published 2026-10-16
Rocky Linux 8
RLSA-2026:83552 · Published 2026-10-16
Rocky Linux 9
RLSA-2026:83553 · Published 2026-10-16
Ubuntu 22.04 LTS (Jammy Jellyfish)
USN-8949-1 · Published 2026-10-21
Ubuntu 24.04 LTS (Noble Numbat)
USN-8949-1 · Published 2026-10-21
Ubuntu 26.04 LTS (Resolute Raccoon)
USN-8949-1 · Published 2026-10-21
Ubuntu 26.10 (Stonking Stingray)
USN-8949-1 · Published 2026-10-21