AArtifex

Products

Exploited and recent CVEs

• CVE-2026-112036 Medium 4.3 Artifex MuPDF Signature Locking pdf-xref.c free_char_list double free 0.3%
• CVE-2026-103226 Medium 6.3 Artifex Ghostscript Pdfwrite gdevpsfx.c type1_callsubr stack-based overflow 0.3%
• CVE-2026-92413 Medium 4.3 Artifex MuPDF PDF Xref Loading pdf-stream.c pdf_open_filter null pointer dereference 0.6%
• CVE-2026-7233 Low 3.3 Artifex MuPDF CFF Index subset-cff.c fz_subset_cff_for_gids out-of-bounds 0.2%
• CVE-2025-15569 High 7.0 Artifex MuPDF win_main.c get_system_dpi uncontrolled search path 0.1%
• CVE-2025-59798 Medium 4.3 Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdf_write_cmap in devices/vector/gdevpdtw.c. 0.2%
• CVE-2025-59799 Medium 4.3 Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfmark_coerce_dest in devices/vector/gdevpdfm.c via a large size value. 0.2%
• CVE-2025-59800 Medium 4.3 In Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdevpdfocr.c has an integer overflow that leads to a heap-based buffer overflow in ocr_line8. 0.2%
• CVE-2025-59801 Medium 4.3 In Artifex GhostXPS before 10.06.0, there is a stack-based buffer overflow in xps_unpredict_tiff in xpstiff.c because the samplesperpixel value is not checked. 0.2%
• CVE-2025-7462 Medium 4.3 Artifex GhostPDL New Output File Open Error gdevpdf.c pdf_ferror null pointer dereference 0.5%
• CVE-2025-48708 Medium 4.0 gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF document includes its password in cleartext. 0.3%
• CVE-2025-46646 Medium 4.5 In Artifex Ghostscript before 10.05.0, decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8 encoding. NOTE: this issue exists because of an incomplete fix for CVE-2024-46954. 0.2%