Skip to content
Multiple Oracle Ghostscript Buffer Overflow Vulnerabilities Disclosed

Multiple Oracle Ghostscript Buffer Overflow Vulnerabilities Disclosed

First seen 17 Oct 2026, 16:47 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 17, 2026 at 18:20 UTC
  • •Two critical Ghostscript vulnerabilities disclosed: CVE-2026-101258 and CVE-2026-103226.
  • •Affected versions include Ghostscript 9.27, 9.54, and 10.02 across Oracle Linux distributions.
  • •Patches were released on October 6 and October 16, 2026; immediate application is recommended.

Oracle has disclosed multiple buffer overflow vulnerabilities in Ghostscript affecting various versions across Oracle Linux 8, 9, and 10. The vulnerabilities, identified as CVE-2026-101258 and CVE-2026-103226, include a stack-based buffer overflow in pdfwrite and a sandbox bypass via Type 5 shading. These flaws could allow remote code execution and have been rated with CVSS scores of 7.8 (high) and 5.3 (medium) respectively. Affected systems include Ghostscript versions 9.27 and 9.54 for Oracle Linux 8 and 9, and version 10.02 for Oracle Linux 10. Patches for these vulnerabilities were released on October 6, 2026, and October 16, 2026, respectively. Administrators are urged to apply the updates promptly to mitigate potential risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-30
CVE-2026-103226 published
Oracle published CVE-2026-103226, a medium severity buffer overflow vulnerability.
Linuxsecurity
2026-10-06
CVE-2026-101258 published
Oracle published CVE-2026-101258, a high severity buffer overflow vulnerability.
Linuxsecurity
2026-10-16
Patches released for vulnerabilities
Oracle released patches for Ghostscript vulnerabilities across multiple Linux versions.
Linuxsecurity

More articles in this cluster (3)

Following this threat?

Track CVE-2026-101258 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (8)

1 / 3

Common questions

Which versions are affected?
Ghostscript versions 9.27, 9.54, and 10.02 across Oracle Linux 8, 9, and 10 are affected.
What should I do to protect my systems?
Apply the patches released on October 6 and October 16, 2026, to mitigate the vulnerabilities.
Is there any active exploitation reported?
No active exploitation has been reported for these vulnerabilities as of now.