CVE-2017-9619: The xps_true_callback_glyph_name function in xps/xpsttf.c in Artifex Ghostscript GhostXPS 9.21 allows remot...

Security readout for executives and security teams

CVE-2017-9619 is a denial-of-service issue in Artifex Ghostscript GhostXPS 9.21. A specially crafted file can crash the application. The known impact is availability loss, not data theft or code execution, based on the provided sources. Exposure is most likely where GhostXPS 9.21 or packages containing that code parse untrusted XPS files, such as document conversion services, mail gateways, upload pipelines, or desktop workflows. Treat as a targeted availability risk for document-processing environments. Patch in normal vulnerability cycles unless GhostXPS handles external files in business-critical workflows, where remediation should be prioritized. Mitigation focus: Check Artifex and OS vendor guidance for fixed GhostXPS or Ghostscript packages.; Prioritize updates on systems that process user-supplied XPS documents.; Isolate document conversion workers from critical services where feasible..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.