CVE-2024-29507

MEDIUM

Artifex Ghostscript <10.03.0 - Buffer Overflow

Title source: llm

Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters.

Core 3

Core References

Issue Tracking

Broken Link

Mailing List

CVSS v3 5.4

EPSS 0.0011

EPSS Percentile 29.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

CWE

CWE-120

Status published

Products (1)

artifex/ghostscript < 10.03.0

Published Jul 03, 2024

Tracked Since Feb 18, 2026