CVE-2024-46952

HIGH

Artifex Ghostscript < 10.04.0 - Buffer Overflow

Title source: rule

Description

An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (related to W array values).

References (3)

[Permissions Required] https://bugs.ghostscript.com/show_bug.cgi?id=708001

[Patch] https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=b1f0827c30f59a2dcbc8a39e42cace7a1de35f7f

[Product] https://github.com/ArtifexSoftware/ghostpdl/blob/master/doc/News.html

View Writeup ZIP pw:eip

Scores

CVSS v3 7.8

EPSS 0.0005

EPSS Percentile 16.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE

CWE-120

Status published

Affected Products (2)

artifex/ghostscript < 10.04.0

debian/debian_linux

Timeline

Published Nov 10, 2024

Tracked Since Feb 18, 2026