CVE-2010-4820: Ghostscript

Medium severity, CVSS 4.4. EPSS: 0.5% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary PostScript code via a Trojan horse Postscript library file in Encoding/ under the current working directory, a different vulnerability than CVE-2010-2055.

Affected products

• Ghostscript Ghostscript: version 8.62 only

Published 2014-10-27. Last modified 2026-06-16.