VDB
GCVE-VVD-MAGEIA-2023-260
GCVE-VVD-MAGEIA-2023-260
Advisory Published
Ghostscript through 10.01.2 mishandles permission validation for pipe
devices (with the %pipe% prefix or the | pipe character prefix).
(CVE-2023-36664)
A buffer overflow flaw was found in base/gdevdevn.c:1973 in
devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker
to cause a denial of service via outputting a crafted PDF file for a DEVN
device with gs. (CVE-2023-38559)
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | ghostscript | 0 (affected), 9.53.3-2.6.mga8 (unaffected) | — |
| Mageia | ghostscript | 0 (affected), 10.00.0-6.2.mga9 (unaffected) | — |
References
Browse GCVE Records
100 records in the GCVE database · Updated April 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.