CVE-2016-10217

Severity: medium (CVSS 5.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2017-04-03 · updated 2026-06-17
Weakness: CWE-416

Description

The pdf14_open function in base/gdevp14.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted file that is mishandled in the color management module.

Affected products

Artifex Ghostscript: 9.20

References

http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=90fd0c7ca3efc1ddff64a86f4104b13b3ac969eb
https://bugs.ghostscript.com/show_bug.cgi?id=697456
http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=90fd0c7ca3efc1ddff64a86f4104b13b3ac969eb
https://bugs.ghostscript.com/show_bug.cgi?id=697456

Get alerted when CVE-2016-10217 or the next vulnerability affects your stack