CVE-2020-27792High· 7.1▾ TwilightA heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF file, triggering the heap buffer overflow…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 39.1 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.5%
A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF file, triggering the heap buffer overflow that could lead to memory corruption or a denial of service.
ghostscript (all versions)ghostscriptghostscriptghostscriptRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-103226Medium· 6.3A vulnerability was identified in Artifex Ghostscript up to 10.07.0
CVE-2023-4042Medium· 5.5Ghostscript: incomplete fix for cve-2020-16305
CVE-2023-38560Medium· 5.5Ghostscript: integer overflow in pcl/pl/plfont.c:418 in pl_glyph_name
CVE-2023-40661Medium· 5.4Opensc: multiple memory issues with pkcs15-init (enrollment tool)
CVE-2026-110133Medium· 5.8Ghostscript: heap buffer overflow in ghostscript truetype outliner due to npointstotal integer underflow during retry rollback
CVE-2026-112922Low· 3.3Ghostscript: out-of-bounds read in ghostscript shade_next_color via integer overflow of indexed color index in mesh shading