{"id":"CVE-2026-103226","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-103226","generatedAt":"2026-10-28T01:12:38.712Z","title":"A vulnerability was identified in Artifex Ghostscript up to 10.07.0.","description":"A vulnerability was identified in Artifex Ghostscript up to 10.07.0. Affected is the function type1_callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite. The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. Upgrading to version 10.08.0 is able to address this issue. It is suggested to upgrade the affected component. A solution was implemented: \"I've chosen to fix this slightly differently by using the defined macro in the font parsing loop rather than in the callsubr function, because this better matches the pattern of 'normal' usage.\"","published":"2026-09-30T15:22:26.000Z","lastModified":"2026-10-15T17:17:10.000Z","status":"Awaiting Analysis","sourceIdentifier":"cna@vuldb.com","cvss":{"version":"4.0","score":2.1,"severity":"LOW","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-119","CWE-121"],"affected":[],"epss":{"score":0.00319,"percentile":0.24617,"date":"2026-10-26","history":[{"date":"2026-10-01","score":0.0044,"percentile":0.35923}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.32%). Track it; it rarely justifies an emergency change on its own."},"changes":[{"kind":"new","label":"New CVE","at":"2026-09-30T15:22:26.000Z","detail":{"score":"2.1","severity":"LOW","publishedAt":"2026-09-30T15:22:25.663Z"},"summary":"New CVE, low severity (CVSS 2.1)."}],"references":[{"url":"https://artifex.com/","source":"cna@vuldb.com"},{"url":"https://bugs.ghostscript.com/attachment.cgi?id=28495","source":"cna@vuldb.com"},{"url":"https://bugs.ghostscript.com/show_bug.cgi?id=709672","source":"cna@vuldb.com"},{"url":"https://bugs.ghostscript.com/show_bug.cgi?id=709672#c3","source":"cna@vuldb.com"},{"url":"https://ghostscript.com/releases/gsdnld.html","source":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2026-103226","source":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/955016","source":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/411906","source":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/411906/cti","source":"cna@vuldb.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-103226","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}