CVE-2019-14869

A flaw was found in all versions of ghostscript 9.x before 9.50, where the `.charkeys` procedure, where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges within the Ghostscript and access files outside of restricted areas or execute commands.

• CWE-648
• CWE-732

• http://jvn.jp/en/jp/JVN52486659/index.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00049.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00050.htmlMailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2019/11/15/1Mailing List, Patch, Third Party Advisory
• https://access.redhat.com/errata/RHSA-2020:0222Third Party Advisory
• https://bugs.ghostscript.com/show_bug.cgi?id=701841Permissions Required
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14869Issue Tracking, Patch, Third Party Advisory
• https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=485904772c5f
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2Q4E3OTDAJRSUCOBTDQO7Y5UTE2FFMLF/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HC4REO73BEJOJAU7NHFHJECAUAYJUE3H/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IX55AEDERTDFEZAROKZW64MZRPLINEGI/
• https://seclists.org/bugtraq/2019/Nov/27Issue Tracking, Mailing List, Third Party Advisory
• http://jvn.jp/en/jp/JVN52486659/index.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00049.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00050.htmlMailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2019/11/15/1Mailing List, Patch, Third Party Advisory
• https://access.redhat.com/errata/RHSA-2020:0222Third Party Advisory
• https://bugs.ghostscript.com/show_bug.cgi?id=701841Permissions Required
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14869Issue Tracking, Patch, Third Party Advisory
• https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=485904772c5f
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2Q4E3OTDAJRSUCOBTDQO7Y5UTE2FFMLF/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HC4REO73BEJOJAU7NHFHJECAUAYJUE3H/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IX55AEDERTDFEZAROKZW64MZRPLINEGI/
• https://seclists.org/bugtraq/2019/Nov/27Issue Tracking, Mailing List, Third Party Advisory

Published

Nov 15, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-14863There is a vulnerability in all angular versions before 1.5.…6.1
• CVE-2019-14864Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and…6.5
• CVE-2019-14865A flaw was found in the grub2-set-bootflag utility of grub2.…5.9
• CVE-2019-14866In all versions of cpio before 2.13 does not properly valida…7.3
• CVE-2019-14867A flaw was found in IPA, all 4.6.x versions before 4.6.7, al…8.8
• CVE-2019-14868In ksh version 20120801, a flaw was found in the way it eval…7.8
• CVE-2019-1487An information disclosure vulnerability in Android Apps usin…6.5
• CVE-2019-14870All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.1…5.4
• CVE-2019-14871The REENT_CHECK macro (see newlib/libc/include/sys/reent.h) …6.5
• CVE-2019-14872The _dtoa_r function of the newlib libc library, prior to ve…6.5
• CVE-2019-14873In the __multadd function of the newlib libc library, prior …6.5
• CVE-2019-14874In the __i2b function of the newlib libc library, all versio…6.5