CVE-2018-11645: Artifex Ghostscript

Medium severity, CVSS 5.3. EPSS: 2.6% chance of exploitation in the next 30 days.

psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977.

Affected products

• Artifex Ghostscript: up to and including 9.20

Published 2018-06-01. Last modified 2026-06-17.