DEBIAN-CVE-2018-15909

DEBIAN-CVE-2018-15909 PUBLISHED CVSS 7.800000190734863 HIGH

In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could be used by attackers able to supply crafted PostScript files to crash the interpreter or potentially execute code.

Risk Scores

CVSS v3.0

7.800000190734863

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
Debian:11	ghostscript	0, 0, 0
Debian:14	ghostscript	0, 0, 0
Debian:13	ghostscript	0, 0, 0
Debian:12	ghostscript	0, 0, 0

Timeline

Aug 27, 2018 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2018-15909 advisory

Open in Interactive Console →