Critical Security Update for Ghostscript: Addressing Sandbox Bypass and Buffer Overflow Vulnerabilities
Summary
ALSA-2026:83553: Important: ghostscript security update. Affects ghostscript versions < 9.54.0-19.el9_8.3. Fixed in 9.54.0-19.el9_8.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Ghostscript is a suite of software that provides utilities for rendering PostScript and PDF documents. It translates PostScript code into common bitmap formats, enabling users to display or print documents effectively. However, recent vulnerabilities have been identified that could compromise the security of systems utilizing Ghostscript, particularly in the AlmaLinux 9 ecosystem.
Vulnerability Detail
The vulnerabilities in Ghostscript include a sandbox bypass via a Type 5 shading out-of-bounds write and a procedure-stream use-after-free (CVE-2026-101258), as well as a stack-based buffer overflow in pdfwrite caused by crafted font data (CVE-2026-103226). These vulnerabilities could allow attackers to execute arbitrary code, leading to potential system compromise and unauthorized access to sensitive information.
How To Fix
Minimum fixed version
9.54.0-19.el9_8.3
This is the first release that contains the fix.
sudo dnf update ghostscriptTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds are provided for these vulnerabilities. The best course of action is to apply the security updates as soon as they are available.
Conclusion
The identified vulnerabilities in Ghostscript pose significant risks to systems using the software. It is imperative to update to the latest patched version to safeguard against potential exploits. Regular monitoring and vulnerability management are essential for maintaining system security.
See every vulnerability recorded for ghostscript →
FAQ
Ghostscript is a suite of software that interprets PostScript and PDF files, allowing users to view, print, and convert these documents.
The vulnerabilities include a sandbox bypass and a stack-based buffer overflow, which could lead to arbitrary code execution.
You can use Vulert, which monitors open-source vulnerabilities in your software. You can check your application using the Vulert playground without needing to sign up.
While no specific workarounds are available, it is crucial to prioritize updating Ghostscript to mitigate the risks associated with these vulnerabilities.
For detailed information, refer to the CVE pages listed in the advisory, which provide insights into the impact and technical details of the vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for ghostscript.
