CVE-2016-10317

7.8 highEPSS 2.3%

High (7.8) in artifex ghostscript. EPSS 2.3% chance of exploitation in the next 30 days.

The fill_threshhold_buffer function in base/gxht_thresh.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted PostScript document.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2017-04-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

artifex:ghostscript

References

http://www.securityfocus.com/bid/97410
https://bugs.ghostscript.com/show_bug.cgi?id=697459
https://usn.ubuntu.com/3636-1/
http://www.securityfocus.com/bid/97410
https://bugs.ghostscript.com/show_bug.cgi?id=697459

Check your stack JSON