CVE-2015-3228: Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier all...

Security readout for executives and security teams

Ghostscript 9.15 and earlier can crash when processing a malicious PostScript file. This matters where business systems automatically convert or print documents from users, customers, or partners. The provided sources support denial of service, not confirmed data theft or active exploitation. Systems are most exposed when Ghostscript 9.15 or earlier processes untrusted PostScript files, including automated conversion, print, or document handling workflows. Exposure depends on package version and whether external files reach Ghostscript. Prioritize remediation for servers or workflows that accept outside documents. Internal-only desktop exposure is lower urgency, but package updates should still be applied through normal security maintenance. Mitigation focus: Update Ghostscript using relevant vendor security advisories.; Check Debian DSA-3326, Ubuntu USN-2697-1, Gentoo GLSA-201612-33, and Oracle guidance.; Avoid processing untrusted PostScript files on vulnerable systems until updated..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.