Skip to content
OpenAdvisories
Critical USN-8791-1 1 CVE

ghostscript vulnerability

Published Sep 21, 2026 · Updated Sep 21, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Ghostscript incorrectly handled JPEG 2000 image
components with mismatched subsampling factors. An attacker could
possibly use this issue to cause Ghostscript to crash or execute
arbitrary code if it opened a specially crafted file.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS ghostscript 9.55.0~dfsg1-0ubuntu5.14
Ubuntu · 24.04 LTS 24.04:LTS ghostscript 10.02.1~dfsg1-0ubuntu7.9
Ubuntu · 26.04 LTS 26.04:LTS ghostscript 10.06.0~dfsg-3ubuntu1.1

Vulnerabilities 1

  • Critical 9.8
    CVE-2026-39919

    Ghostscript < 10.08.0 Heap Buffer Overflow via JPEG 2000 Output Adapter

    Ghostscript before 10.08.0 contains a heap-based buffer overflow vulnerability in the JPEG 2000 output adapter (base/sjpx_openjpeg.c) that allows attackers to cause memory corruption by supplying a crafted PDF containing a JPEG 2000 image with mismatched comp…

    Artifex Ghostscript ghostscript ghostscript Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2026-39919