Published Sep 30, 2026Sources checked Oct 21, 2026
6.3MEDIUMCVSS out of 10
What this means
Review the available evidence
CVE-2026-103226 and is rated Medium severity with a CVSS score of 6.3. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
CISA KEVNot listedBased on the latest collected catalog
EPSS0.5%Estimated 30-day exploitation probability
Ransomware useNot markedCISA KEV ransomware field
Threat actors0Source-linked actor relationships
Overview
What is CVE-2026-103226?
A vulnerability was identified in Artifex Ghostscript up to 10.07.0. Affected is the function type1_callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite.
The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible.
The exploit is publicly available and might be used. Upgrading to version 10.08.0 is able to address this issue.
It is suggested to upgrade the affected component. A solution was implemented: "I've chosen to fix this slightly differently by using the defined macro in the font parsing loop rather than in the callsubr function, because this better matches the pattern of 'normal' usage."