CVE-2017-6196: Multiple use-after-free vulnerabilities in the gx_image_enum_begin function in base/gxipixel.c in Ghostscri...

Security readout for executives and security teams

Ghostscript could crash when processing a malicious PostScript document because of multiple use-after-free flaws. Business risk is highest where Ghostscript handles files from email, uploads, print workflows, or document conversion. The public record does not confirm active exploitation or a precise affected version range beyond code before the named fix commit. Exposure is likely where Ghostscript processes untrusted PostScript directly or through print, preview, thumbnailing, or document conversion pipelines. The source bundle does not provide specific product versions, distributions beyond Gentoo advisory context, or CPEs. Prioritize remediation for internet-facing or email-facing document workflows. For internal-only, trusted document processing, handle through normal patch cycles unless crash evidence or untrusted file intake exists. Mitigation focus: Update Ghostscript using vendor-supported packages that include the referenced upstream fix.; For Gentoo systems, review and apply GLSA-201708-06 guidance.; Restrict processing of untrusted PostScript where business workflows allow..

Prepared

Jun 13, 2026, 06:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.