Vulnerability Database · OSS-Fuzz · ghostscript · Version
ghostscript gpdf_alpha1
gpdf_alpha1 is affected by 8 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 0 High 3 Medium 4 Low 0 Unrated 1
-
Database updated 23/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
ghostscript gpdf_alpha1 vulnerabilities
8 vulnerabilities cover ghostscript gpdf_alpha1. Open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| Vulnerability in ghostscript: UNKNOWN READ in stream_finalize | N/A medium | No fix published | 03 Sep 2022 |
| UNKNOWN READ in ref_stack_counttomark in ghostscript | N/A medium | d9c9ce0bf43b17770ff826261d5fed835a29d8ff | 16 Apr 2022 |
| Null-dereference READ in gstate_clone_core in ghostscript | N/A unrated | No fix published | 24 Jan 2022 |
| UNKNOWN READ Vulnerability in ghostscript | N/A medium | No fix published | 21 Dec 2021 |
| UNKNOWN READ vulnerability in ghostscript: pdfi_dereference | N/A medium | No fix published | 20 Dec 2021 |
| Heap-use-after-free vulnerability in ghostscript | N/A high | No fix published | 01 Aug 2021 |
| Heap-buffer-overflow in sampled_data_finish in ghostscript | N/A high | 2a3129365d3bc0d4a41f107ef175920d1505d1f7 | 27 May 2021 |
| Heap-use-after-free vulnerability in ghostscript | N/A high | fe8965b8a179c083060b66a7db13cad171ff470b | 02 May 2021 |
Looking for another version, or everything Vulert holds for ghostscript?
Questions
About ghostscript gpdf_alpha1
Is ghostscript gpdf_alpha1 vulnerable?
Yes. 8 vulnerabilities in the Vulert database cover ghostscript gpdf_alpha1: 0 critical, 3 high, 4 medium and 0 low, plus 1 not yet rated. Each entry above names the fixed version to move to.
How do I monitor ghostscript for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the ghostscript version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.