Log in Start free

Vulnerability · Published Sep 15, 2026 · Assigned by VulnCheck

CVE-2026-39919Ghostscript < 10.08.0 Heap Buffer Overflow via JPEG 2000 Output Adapter

Critical 9.8

In plain English

A critical-severity heap buffer overflow in Ghostscript from Artifex Software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.8%top 41.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter (base/sjpx_openjpeg.c) that allows attackers to cause memory corruption by supplying a crafted PDF containing a JPEG 2000 image with mismatched component subsampling factors. When image components declare different subsampling values, the non-samescale sub-byte-depth output path allocates a row buffer sized for packed output but writes a full byte per output column regardless of bit depth, overflowing the allocation and corrupting internal chunk-allocator metadata to achieve code execution.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:10ghostscript10.02.1-16.el10_2.1ALSA-2026:74464
AlmaLinux:8ghostscript9.27-18.el8_10ALSA-2026:76877
AlmaLinux:9ghostscript9.54.0-19.el9_8.1ALSA-2026:74457
AlmaLinux:10ghostscript-doc10.02.1-16.el10_2.1ALSA-2026:74464
AlmaLinux:8ghostscript-doc9.27-18.el8_10ALSA-2026:76877
AlmaLinux:9ghostscript-doc9.54.0-19.el9_8.1ALSA-2026:74457
AlmaLinux:10ghostscript-tools-dvipdf10.02.1-16.el10_2.1ALSA-2026:74464
AlmaLinux:8ghostscript-tools-dvipdf9.27-18.el8_10ALSA-2026:76877
AlmaLinux:9ghostscript-tools-dvipdf9.54.0-19.el9_8.1ALSA-2026:74457
AlmaLinux:10ghostscript-tools-fonts10.02.1-16.el10_2.1ALSA-2026:74464
AlmaLinux:8ghostscript-tools-fonts9.27-18.el8_10ALSA-2026:76877
AlmaLinux:9ghostscript-tools-fonts9.54.0-19.el9_8.1ALSA-2026:74457
AlmaLinux:10ghostscript-tools-printing10.02.1-16.el10_2.1ALSA-2026:74464
AlmaLinux:8ghostscript-tools-printing9.27-18.el8_10ALSA-2026:76877
AlmaLinux:9ghostscript-tools-printing9.54.0-19.el9_8.1ALSA-2026:74457
AlmaLinux:8ghostscript-x119.27-18.el8_10ALSA-2026:76877
AlmaLinux:9ghostscript-x119.54.0-19.el9_8.1ALSA-2026:74457
AlmaLinux:10libgs10.02.1-16.el10_2.1ALSA-2026:74464
AlmaLinux:8libgs9.27-18.el8_10ALSA-2026:76877
AlmaLinux:9libgs9.54.0-19.el9_8.1ALSA-2026:74457
AlmaLinux:10libgs-devel10.02.1-16.el10_2.1ALSA-2026:74464
AlmaLinux:8libgs-devel9.27-18.el8_10ALSA-2026:76877
AlmaLinux:9libgs-devel9.54.0-19.el9_8.1ALSA-2026:74457
Alpine:v3.23ghostscript10.08.0-r0ALPINE-CVE-2026-39919
Alpine:v3.24ghostscript10.08.0-r0ALPINE-CVE-2026-39919
Debian:12ghostscriptno fix listedDEBIAN-CVE-2026-39919
Debian:13ghostscript10.05.1~dfsg-1+deb13u2DEBIAN-CVE-2026-39919
Debian:14ghostscript10.08.0~dfsg-1DEBIAN-CVE-2026-39919
Rocky Linux:10ghostscript0:10.02.1-16.el10_2.1RLSA-2026:74464
Rocky Linux:8ghostscript0:9.27-18.el8_10RLSA-2026:76877
Rocky Linux:9ghostscript0:9.54.0-19.el9_8.1RLSA-2026:74457
Ubuntu:22.04:LTSghostscript9.55.0~dfsg1-0ubuntu5.14USN-8791-1
Ubuntu:22.04:LTSghostscript9.55.0~dfsg1-0ubuntu5.14UBUNTU-CVE-2026-39919
Ubuntu:24.04:LTSghostscript10.02.1~dfsg1-0ubuntu7.9UBUNTU-CVE-2026-39919
Ubuntu:24.04:LTSghostscript10.02.1~dfsg1-0ubuntu7.9USN-8791-1
Ubuntu:26.04:LTSghostscript10.06.0~dfsg-3ubuntu1.1UBUNTU-CVE-2026-39919
Ubuntu:26.04:LTSghostscript10.06.0~dfsg-3ubuntu1.1USN-8791-1

Affected products (as reported)

VendorProductVersions
Artifex Software Ghostscript 0 – before 10.08.0

Weakness: CWE-122 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References