Artifex Ghostscript Fonts — known CVE vulnerabilities

Every CVE whose affected-product data names Artifex Ghostscript Fonts, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2009-3743 — CVSS 9.3 (critical): Off-by-one error in the Ins_MINDEX function in the TrueType bytecode interpreter in Ghostscript before 8.71 allows remote attackers to…
• CVE-2009-4897 — CVSS 9.3 (critical): Buffer overflow in gs/psi/iscan.c in Ghostscript 8.64 and earlier allows remote attackers to execute arbitrary code or cause a denial of…
• CVE-2010-2055 — CVSS 7.2 (high): Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary…
• CVE-2010-4054 — CVSS 4.3 (medium): The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and…