CVE-2018-19475
HIGH · CVSS 7.8EPSS 9.5%EU EUVD
psi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because available stack space is not checked when the device remains the same.
Key facts
- CVSS score
- 7.8 (v3.0)
- Severity
- HIGH
- CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H- EPSS score
- 9.5% (95th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2018-11164)
- Published
- November 23, 2018
- NVD last modified
- June 17, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2018-11164 in the EU Vulnerability Database. Last updated in EUVD on August 5, 2024.
View on the EU Vulnerability DatabaseAffected products
- artifex / ghostscript
- canonical / ubuntu linux
- canonical / ubuntu linux
- canonical / ubuntu linux
- canonical / ubuntu linux
- debian / debian linux
- debian / debian linux
- redhat / enterprise linux desktop
- redhat / enterprise linux server
- redhat / enterprise linux server
- redhat / enterprise linux server aus
- redhat / enterprise linux server eus
- redhat / enterprise linux server tus
- redhat / enterprise linux workstation
- redhat / openshift container platform
Certified products that may be affected
2 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.
- Red Hat Enterprise Linux 7 OpenSSH Server Cryptographic Module - Red Hat®, Inc. - FIPS 140 3891 - historical
- Red Hat Enterprise Linux 7.6 - Red Hat, Inc. - Common Criteria CCEVS-VR-VID-11039-2020 - archived
References
- http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=3005fcb9bb160af199e761e03bc70a9f249a987e
- http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=aeea342904978c9fe17d85f4906a0f6fcce2d315
- http://www.securityfocus.com/bid/106154(Third Party Advisory, VDB Entry)
- https://access.redhat.com/errata/RHBA-2019:0327(Third Party Advisory)
- https://access.redhat.com/errata/RHSA-2019:0229(Third Party Advisory)
- https://bugs.ghostscript.com/show_bug.cgi?id=700153(Issue Tracking, Patch, Vendor Advisory)
- https://lists.debian.org/debian-lts-announce/2018/11/msg00036.html(Mailing List, Third Party Advisory)
- https://semmle.com/news/semmle-discovers-severe-vulnerability-ghostscript-postscript-pdf(Exploit, Mitigation, Third Party Advisory)
- https://usn.ubuntu.com/3831-1/(Third Party Advisory)
- https://www.debian.org/security/2018/dsa-4346(Third Party Advisory)
- https://www.ghostscript.com/doc/9.26/History9.htm#Version9.26(Release Notes, Vendor Advisory)
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain