CVE-2016-8602: Artifex Ghostscript

High severity, CVSS 7.8. EPSS: 3.2% chance of exploitation in the next 30 days.

The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Postscript document that calls .sethalftone5 with an empty operand stack.

Affected products

• Artifex Ghostscript: up to and including 9.20

Published 2017-04-14. Last modified 2026-06-17.