CVE-2020-16303: Artifex Ghostscript

High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days.

A use-after-free vulnerability in xps_finish_image_path() in devices/vector/gdevxps.c of Artifex Software GhostScript v9.50 allows a remote attacker to escalate privileges via a crafted PDF file. This is fixed in v9.51.

Affected products

• Artifex Ghostscript: version 9.50 only
• Canonical Ubuntu Linux: version 16.04 only; version 18.04 only; version 20.04 only
• Debian Debian Linux: version 9.0 only; version 10.0 only

Published 2020-08-13. Last modified 2026-06-17.