CVE-2020-16304: A buffer overflow vulnerability in image_render_color_thresh() in base/gxicolor.c of Artifex Software Ghost...

Security readout for executives and security teams

Ghostscript versions 9.18 through 9.50 contain a buffer overflow reachable through a crafted EPS file. If a business service processes untrusted EPS files with affected Ghostscript versions, an attacker could potentially gain elevated privileges. The vendor-fixed version is 9.51, and Linux distributions issued security updates. Highest exposure is in servers, desktops, or automated document-conversion pipelines that invoke Ghostscript on untrusted EPS content. Packaged Ghostscript deployments on Debian, Ubuntu, and Gentoo were relevant enough to receive advisories. Exact product inventory must be confirmed locally. Treat this as a high-priority patching item where Ghostscript handles untrusted files. The business risk is concentrated in document-processing workflows, especially public upload, email, print, and conversion services. No active exploitation evidence is provided, so prioritize by exposure rather than panic. Mitigation focus: Upgrade Ghostscript to version 9.51 or later where vendor-supported.; Apply fixed Debian, Ubuntu, or Gentoo security packages where applicable.; Temporarily restrict untrusted EPS processing until affected systems are patched..

Prepared

Jun 3, 2026, 10:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.