The ghostscript Project — Vulnerabilities & Security Advisories 3

Ghostscript serves as a critical interpreter for PostScript and PDF files, enabling rendering and processing across numerous applications and systems. Historically, it has been susceptible to remote code execution vulnerabilities due to unsafe PostScript language features, along with memory corruption flaws and privilege escalation issues through malicious input handling. The project maintains a moderate CVE count with three active records, reflecting ongoing security challenges. Notable incidents include past RCE vulnerabilities in versions prior to 9.50, where attackers could execute arbitrary code via specially crafted documents, highlighting the risks of processing untrusted input in a powerful interpreter environment.