CVE-2026-103226

Awaiting Analysis Awaiting Analysis - Queue

Stack-Based Buffer Overflow in Artifex Ghostscript

Publication date: 2026-09-30

Last updated on: 2026-10-15

Assigner: VulDB

Description

A vulnerability was identified in Artifex Ghostscript up to 10.07.0. Affected is the function type1_callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite. The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. Upgrading to version 10.08.0 is able to address this issue. It is suggested to upgrade the affected component. A solution was implemented: "I've chosen to fix this slightly differently by using the defined macro in the font parsing loop rather than in the callsubr function, because this better matches the pattern of 'normal' usage."

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-30

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-09-30

EPSS Evaluated

2026-10-18

NVD

CVE-2026-103226

EUVD

EUVD-2026-89962

Affected Vendors & Products

Vendor	Product	Version / Range
artifex	ghostscript	to 10.09.0 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CWE-119	The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

Executive Summary

This is a stack-based buffer overflow vulnerability in Artifex Ghostscript versions up to 10.09.0. It exists in the type1_callsubr function within the devices/vector/gdevpsfx.c file of the Pdfwrite component. The flaw allows remote attackers to manipulate the system, potentially leading to arbitrary code execution or denial of service.

Detection Guidance

The provided CVE data does not include specific detection methods or commands for identifying this vulnerability on a network or system. It is recommended to monitor for unusual behavior in Ghostscript processes, check for known indicators of compromise, and apply patches from Artifex as soon as possible.

Impact Analysis

If exploited, this vulnerability could allow attackers to execute arbitrary code on your system, crash applications, or gain unauthorized access. Since Ghostscript is commonly used for PDF processing, unpatched systems processing malicious files could be at risk.

Compliance Impact

The provided CVE data does not specify direct impacts on compliance with standards like GDPR or HIPAA. The vulnerability involves a stack-based buffer overflow in Ghostscript, which could potentially lead to unauthorized code execution or data exposure if exploited. Such risks may indirectly affect compliance by compromising data integrity or confidentiality, but no explicit details are provided.

Mitigation Strategies

Update Artifex Ghostscript to version 10.09.0 or later to address the stack-based buffer overflow in the type1_callsubr function. The vulnerability is exploitable remotely and a public exploit exists, so patching is critical.

Hi! I’m here to help you understand CVE-2026-103226. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70