In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could be used by attackers able to supply crafted PostScript files to crash the interpreter or potentially execute code.
| Product | Vendor | Version |
|---|---|---|
| n/a | n/a | < 253f9ea7e8e53a5176bd80ceb174907b10724c1a |