Description
Artifex Ghostscript before 10.03.0 has a stack-based buffer overflow in the pdfi_apply_filter() function via a long PDF filter name.
References (3)
Core 3
Core References
Issue Tracking
https://bugs.ghostscript.com/show_bug.cgi?id=707510
Broken Link
https://git.ghostscript.com/?p=ghostpdl.git%3Bh=77dc7f699beba606937b7ea23b50cf5974fa64b1
Mailing List, Third Party Advisory
https://www.openwall.com/lists/oss-security/2024/07/03/7
Scores
CVSS v3
8.8
EPSS
0.0014
EPSS Percentile
33.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-120
CWE-787
Status
published
Products (1)
artifex/ghostscript
< 10.03.0
Published
Jul 03, 2024
Tracked Since
Feb 18, 2026