Search/CVE-2010-1628
● CVE

CVE-2010-1628

VendorartifexProductgpl ghostscriptDiscoveredMay 19, 2010UpdatedApr 29, 2026

Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute arbitrary code via a PostScript file containing unlimited recursive procedure invocations, which trigger memory corruption in the stack of the interpreter.

CVSS v3.1
—
EPSS
4.04%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
2 relationships
Timeline
disclosure → media coverage
May 19, 2010
Disclosure — published as a CVE record. · last revised by NVD Apr 29, 2026