CVE-2018-19478: Artifex Ghostscript

Medium severity, CVSS 5.5. EPSS: 1.9% chance of exploitation in the next 30 days.

In Artifex Ghostscript before 9.26, a carefully crafted PDF file can trigger an extremely long running computation when parsing the file.

Affected products

• Artifex Ghostscript: before 9.26 (fixed in 9.26)
• Debian Debian Linux: version 8.0 only

Published 2019-01-02. Last modified 2026-06-17.