Log in Start free

Vulnerability · Published Oct 6, 2026 · Assigned by redhat

CVE-2026-101258Ghostscript: ghostscript: -dsafer sandbox bypass via type 5 shading oob write and procedure-stream use-after-free

High 7.8

In plain English

A high-severity out-of-bounds write in Red Hat Enterprise Linux 10 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 92.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory corruption in document parsing with disabling of internal path access controls at runtime. An attacker can deliver the document directly or through formats that delegate rendering to Ghostscript (for example EPS import or print conversion workflows). Successful exploitation can compromise confidentiality, integrity, and availability of data accessible to the process running Ghostscript.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:10ghostscript10.02.1-16.el10_2.3ALSA-2026:83551
AlmaLinux:8ghostscript9.27-19.el8_10ALSA-2026:83552
AlmaLinux:9ghostscript9.54.0-19.el9_8.3ALSA-2026:83553
AlmaLinux:10ghostscript-doc10.02.1-16.el10_2.3ALSA-2026:83551
AlmaLinux:8ghostscript-doc9.27-19.el8_10ALSA-2026:83552
AlmaLinux:9ghostscript-doc9.54.0-19.el9_8.3ALSA-2026:83553
AlmaLinux:10ghostscript-tools-dvipdf10.02.1-16.el10_2.3ALSA-2026:83551
AlmaLinux:8ghostscript-tools-dvipdf9.27-19.el8_10ALSA-2026:83552
AlmaLinux:9ghostscript-tools-dvipdf9.54.0-19.el9_8.3ALSA-2026:83553
AlmaLinux:10ghostscript-tools-fonts10.02.1-16.el10_2.3ALSA-2026:83551
AlmaLinux:8ghostscript-tools-fonts9.27-19.el8_10ALSA-2026:83552
AlmaLinux:9ghostscript-tools-fonts9.54.0-19.el9_8.3ALSA-2026:83553
AlmaLinux:10ghostscript-tools-printing10.02.1-16.el10_2.3ALSA-2026:83551
AlmaLinux:8ghostscript-tools-printing9.27-19.el8_10ALSA-2026:83552
AlmaLinux:9ghostscript-tools-printing9.54.0-19.el9_8.3ALSA-2026:83553
AlmaLinux:8ghostscript-x119.27-19.el8_10ALSA-2026:83552
AlmaLinux:9ghostscript-x119.54.0-19.el9_8.3ALSA-2026:83553
AlmaLinux:10libgs10.02.1-16.el10_2.3ALSA-2026:83551
AlmaLinux:8libgs9.27-19.el8_10ALSA-2026:83552
AlmaLinux:9libgs9.54.0-19.el9_8.3ALSA-2026:83553
AlmaLinux:10libgs-devel10.02.1-16.el10_2.3ALSA-2026:83551
AlmaLinux:8libgs-devel9.27-19.el8_10ALSA-2026:83552
AlmaLinux:9libgs-devel9.54.0-19.el9_8.3ALSA-2026:83553
Debian:12ghostscriptno fix listedDEBIAN-CVE-2026-101258
Debian:13ghostscript10.05.1~dfsg-1+deb13u3DEBIAN-CVE-2026-101258
Debian:14ghostscript10.08.0~dfsg-1DEBIAN-CVE-2026-101258
Rocky Linux:10ghostscript0:10.02.1-16.el10_2.3RLSA-2026:83551
Rocky Linux:8ghostscript0:9.27-19.el8_10RLSA-2026:83552
Rocky Linux:9ghostscript0:9.54.0-19.el9_8.3RLSA-2026:83553
Ubuntu:22.04:LTSghostscript9.55.0~dfsg1-0ubuntu5.15UBUNTU-CVE-2026-101258
Ubuntu:22.04:LTSghostscript9.55.0~dfsg1-0ubuntu5.15USN-8949-1
Ubuntu:24.04:LTSghostscript10.02.1~dfsg1-0ubuntu7.10UBUNTU-CVE-2026-101258
Ubuntu:24.04:LTSghostscript10.02.1~dfsg1-0ubuntu7.10USN-8949-1
Ubuntu:26.04:LTSghostscript10.06.0~dfsg-3ubuntu1.2UBUNTU-CVE-2026-101258
Ubuntu:26.04:LTSghostscript10.06.0~dfsg-3ubuntu1.2USN-8949-1
Ubuntu:26.10ghostscript10.07.1~dfsg-1ubuntu2.1UBUNTU-CVE-2026-101258
Ubuntu:26.10ghostscript10.07.1~dfsg-1ubuntu2.1USN-8949-1

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 7 see references

Weakness: CWE-787 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References