Exploit for #VU20468 Permissions, Privileges, and Access Controls in Ghostscript

Published: 2025-06-20

Vulnerability identifier: #VU20468

Vulnerability risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/U:Clear]

CVE-ID: CVE-2019-14811

CWE-ID: CWE-264

Exploitation vector: Network

Exploits in database: 1

June 20, 2025
- CVE-2019-14811-in-pdf-exploit (This exploit targets CVE-2019-14811 in GS environments where PostScript output is not reflected, but is executed such as PDF previews via png images.) [Github]

Vulnerable software:
Ghostscript
Universal components / Libraries / Libraries used by multiple products

Vendor: Artifex Software, Inc.