## USN-8949-1: Ghostscript vulnerabilities

- 種別: advisory
- 関連技術: ubuntu, linux
- CVE: CVE-2026-101258
- 公開日時: 2026-10-21T15:39:32.000Z
- 情報源: Ubuntu Security Notices (https://ubuntu.com/security/notices/USN-8949-1)
- パーマリンク: https://vulnpulse.app/items/ubuntu-usn-13fd678cdb9b

Rick de Jager discovered that Ghostscript incorrectly handled memory under certain circumstances when processing PostScript documents. If a user or automated system were tricked into processing a specially crafted document, an attacker could possibly use this issue to bypass the sandbox and execute arbitrary code. (CVE-2026-101258) It was discovered that Ghostscript incorrectly handled memory when converting certain fonts. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to cause Ghostscript to crash, or possibly ex…