Vendor
Ghostscript -dSAFER Bypass via CVE-2026-112177
1 TTP 2 CVEsAn incomplete security fix in Ghostscript 9.27 on RHEL 8 allows attackers to bypass -dSAFER restrictions, leading to arbitrary file access or command execution via crafted PostScript files.
Ghostscript Sandbox Escape via Crafted PostScript Files
1 TTP 1 CVEA sandbox bypass vulnerability in Ghostscript allows attackers to achieve arbitrary command execution by rendering malicious PostScript or EPS documents that circumvent the -dSAFER protection.
Ghostscript Local Privilege Escalation Vulnerability
1 TTPA vulnerability in the Ghostscript interpreter allows a local attacker to escalate privileges by processing specifically crafted documents.
Heap-Based Buffer Overflow in Ghostscript JPEG 2000 Output Adapter
1 TTP 1 CVEGhostscript versions prior to 10.08.0 are vulnerable to a heap-based buffer overflow in the JPEG 2000 output adapter (CVE-2026-39919), potentially allowing arbitrary code execution via a specially crafted PDF.
Path Traversal Vulnerability in PyMuPDF Font Processing
1 TTPPyMuPDF versions through 1.28.2 contain a path traversal vulnerability in the extract_objects() function, allowing attackers to perform arbitrary file writes via crafted document font metadata.
Exploitation of Ghostscript Leading to Arbitrary Command Execution
1 rule 2 TTPs 1 CVEAttackers are exploiting vulnerabilities in the Ghostscript library, such as CVE-2024-29510, to achieve remote code execution through malicious file processing.