Skip to content
Threat Feed
Subscribe

Vendor

Artifex Software

3 briefs RSS
critical advisory

Heap-Based Buffer Overflow in Ghostscript JPEG 2000 Output Adapter

Ghostscript versions prior to 10.08.0 are vulnerable to a heap-based buffer overflow in the JPEG 2000 output adapter (CVE-2026-39919), potentially allowing arbitrary code execution via a specially crafted PDF.

Ghostscript
1t 1c
high threat

Path Traversal Vulnerability in PyMuPDF Font Processing

PyMuPDF versions through 1.28.2 contain a path traversal vulnerability in the extract_objects() function, allowing attackers to perform arbitrary file writes via crafted document font metadata.

exploited PyMuPDF vulnerability path-traversal software-library
1t
high advisory

Exploitation of Ghostscript Leading to Arbitrary Command Execution

Attackers are exploiting vulnerabilities in the Ghostscript library, such as CVE-2024-29510, to achieve remote code execution through malicious file processing.

Ghostscript
1r 2t 1c updated