CVE-2018-16511

An issue was discovered in Artifex Ghostscript before 9.24. A type confusion in "ztype" could be used by remote attackers able to supply crafted PostScript to crash the interpreter or possibly have unspecified other impact.

• CWE-704

• http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=0edd3d6c634a577db261615a9dc2719bca7f6e01
• http://seclists.org/oss-sec/2018/q3/182Issue Tracking, Mailing List, Patch, Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:3650Third Party Advisory
• https://bugs.ghostscript.com/show_bug.cgi?id=699659Permissions Required, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/09/msg00015.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/201811-12Third Party Advisory
• https://usn.ubuntu.com/3768-1/Third Party Advisory
• https://www.artifex.com/news/ghostscript-security-resolved/Patch, Vendor Advisory
• https://www.debian.org/security/2018/dsa-4288Third Party Advisory
• http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=0edd3d6c634a577db261615a9dc2719bca7f6e01
• http://seclists.org/oss-sec/2018/q3/182Issue Tracking, Mailing List, Patch, Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:3650Third Party Advisory
• https://bugs.ghostscript.com/show_bug.cgi?id=699659Permissions Required, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/09/msg00015.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/201811-12Third Party Advisory
• https://usn.ubuntu.com/3768-1/Third Party Advisory
• https://www.artifex.com/news/ghostscript-security-resolved/Patch, Vendor Advisory
• https://www.debian.org/security/2018/dsa-4288Third Party Advisory

Published

Sep 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-16497In Versa Analytics, the cron jobs are used for scheduling ta…7.8
• CVE-2018-16498In Versa Director, the unencrypted backup files stored on th…5.5
• CVE-2018-16499In VOS compromised, an attacker at network endpoints can pos…5.9
• CVE-2018-1650IBM QRadar SIEM 7.2 and 7.3 uses hard-coded credentials whic…5.9
• CVE-2018-16509An issue was discovered in Artifex Ghostscript before 9.24. …
• CVE-2018-16510An issue was discovered in Artifex Ghostscript before 9.24. …
• CVE-2018-16513In Artifex Ghostscript before 9.24, attackers able to supply…
• CVE-2018-16514A cross-site scripting (XSS) vulnerability in the View Filte…
• CVE-2018-16515Matrix Synapse before 0.33.3.1 allows remote attackers to sp…
• CVE-2018-16516helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a craf…
• CVE-2018-16517asm/labels.c in Netwide Assembler (NASM) is prone to NULL Po…5.5
• CVE-2018-16518A directory traversal vulnerability with remote code executi…