CVE-2021-3781
9.9
CRITICAL · CVSS 3.1 · EPSS 83.9% (pctl 100)
Patch early
EPSS 83.9% — above the 10% action threshold.
Description
A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary commands on the system in the context of the ghostscript interpreter. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Scoring
| CVSS | 9.9 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
| EPSS | 83.91% — more likely to be exploited than 100% of all CVEs |
| Weakness | CWE-20 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2022-02-16 |
| Last modified | 2026-06-17 |
Affected (2)
| Vendor | Product |
|---|---|
| artifex | ghostscript |
| fedoraproject | fedora |
References
→ the Explorer · watch your stack · NVD