DEBIAN-CVE-2018-16802

DEBIAN-CVE-2018-16802 PUBLISHED CVSS 7.800000190734863 HIGH

An issue was discovered in Artifex Ghostscript before 9.25. Incorrect "restoration of privilege" checking when running out of stack during exception handling could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction. This is due to an incomplete fix for CVE-2018-16509.

Risk Scores

CVSS v3.0

7.800000190734863

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
Debian:12	ghostscript	0, 0, 0
Debian:14	ghostscript	0, 0, 0
Debian:13	ghostscript	0, 0, 0
Debian:11	ghostscript	0, 0, 0

Timeline

Sep 10, 2018 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2018-16802 advisory

Open in Interactive Console →