CVE-2017-7948: Artifex Ghostscript

High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Integer overflow in the mark_curve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via a crafted PostScript document.

Affected products

• Artifex Ghostscript: version 9.21 only

Published 2017-04-19. Last modified 2026-06-17.