Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-p9qf-vrde-ruhj
Vulnerability ID VCID-p9qf-vrde-ruhj
Aliases CVE-2018-16509
Summary Multiple vulnerabilities have been found in GPL Ghostscript, the worst of which could result in the execution of arbitrary code.
Status Published
Exploitability 2.0
Weighted Severity 6.6
Risk 10.0
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
cvssv3 7.3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16509.json
epss 0.91758 https://api.first.org/data/v1/epss?cve=CVE-2018-16509
epss 0.91758 https://api.first.org/data/v1/epss?cve=CVE-2018-16509
epss 0.91758 https://api.first.org/data/v1/epss?cve=CVE-2018-16509
epss 0.91758 https://api.first.org/data/v1/epss?cve=CVE-2018-16509
epss 0.91758 https://api.first.org/data/v1/epss?cve=CVE-2018-16509
epss 0.91758 https://api.first.org/data/v1/epss?cve=CVE-2018-16509
epss 0.91758 https://api.first.org/data/v1/epss?cve=CVE-2018-16509
epss 0.91758 https://api.first.org/data/v1/epss?cve=CVE-2018-16509
epss 0.91758 https://api.first.org/data/v1/epss?cve=CVE-2018-16509
epss 0.91758 https://api.first.org/data/v1/epss?cve=CVE-2018-16509
cvssv3 7.3 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16509.json
https://api.first.org/data/v1/epss?cve=CVE-2018-16509
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16509
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16802
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17183
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
1619748 https://bugzilla.redhat.com/show_bug.cgi?id=1619748
907332 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=907332
CVE-2018-16509 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/45369.rb
CVE-2018-16509 Exploit https://raw.githubusercontent.com/rapid7/metasploit-framework/7f20178a0572176d2d57118e1e5cc3ef9c434656/modules/exploits/multi/fileformat/ghostscript_failed_restore.rb
GLSA-201811-12 https://security.gentoo.org/glsa/201811-12
RHSA-2018:2918 https://access.redhat.com/errata/RHSA-2018:2918
RHSA-2018:3760 https://access.redhat.com/errata/RHSA-2018:3760
USN-3768-1 https://usn.ubuntu.com/3768-1/
Data source Exploit-DB
Date added Sept. 10, 2018
Description Ghostscript - Failed Restore Command Execution (Metasploit)
Ransomware campaign use Known
Source publication date Sept. 10, 2018
Exploit type local
Platform linux
Source update date Sept. 10, 2018
Source URL https://raw.githubusercontent.com/rapid7/metasploit-framework/7f20178a0572176d2d57118e1e5cc3ef9c434656/modules/exploits/multi/fileformat/ghostscript_failed_restore.rb
Data source Metasploit
Description This module exploits a -dSAFER bypass in Ghostscript to execute arbitrary commands by handling a failed restore (grestore) in PostScript to disable LockSafetyParams and avoid invalidaccess. This vulnerability is reachable via libraries such as ImageMagick.
Note 
Stability:
  - crash-safe
SideEffects: []
Reliability: []
RelatedModules:
  - exploit/unix/fileformat/ghostscript_type_confusion
  - exploit/unix/fileformat/imagemagick_delegate
Ransomware campaign use Unknown
Source publication date Aug. 21, 2018
Platform Linux,Unix,Windows
Source URL https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/multi/fileformat/ghostscript_failed_restore.rb
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16509.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.99681
EPSS Score 0.91758
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:05:01.034031+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/201811-12 38.0.0