UpHeron
All vulnerabilities

Servers and applications

CVE-2019-14869

A flaw was found in all versions of ghostscript 9.x before 9.50, where the `.charkeys` procedure, where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges within the Ghostscript and access files outside of restricted areas or execute…

Severity
High 8.8
Published
15 Nov 2019
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.50
Exploit chance
3.1% in the next 30 daysHigher than 87% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
GhostscriptServers and applications · cpe:a:artifex:ghostscript
  • From 9.00 before 9.50

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-14869
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-14869