Incorrect Type Conversion or Cast The advisory has been revoked - it doesn't affect any version of package ghostscript-mini-devel (opens in a new tab)

Threat Intelligence

3.04% (87^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-SLES150-GHOSTSCRIPTMINIDEVEL-2759030
published14 Apr 2022
disclosed12 Dec 2018

Report a new vulnerability Found a mistake?

Introduced: 12 Dec 2018

CVE-2018-19476 (opens in a new tab) CWE-704 (opens in a new tab)

Amendment

The SLES security team deemed this advisory irrelevant for SLES:15.0.

NVD Description

Note: Versions mentioned in the description apply only to the upstream ghostscript-mini-devel package and not the ghostscript-mini-devel package as distributed by SLES.

psi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a setcolorspace type confusion.