High severity · published Nov 10, 2024
CVE-2024-46953
An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0
7.8
CVSS
0.4%
EPSS
No
On KEV
Description
An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string (for the output filename) results in path truncation, and possible path traversal and code execution.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DL
Debian Linux · Debian
12.0 · source: NVD
GH
Ghostscript · Artifex
before 10.04.0 · source: NVD
LE
Linux Enterprise High Performance Computing · Suse
12.0 · source: NVD
LE
Linux Enterprise Server · Suse
12; 12; 12 · source: NVD
LE
Linux Enterprise Server For Sap · Suse
12 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-46953
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-46953
Permissions Required
https://bugs.ghostscript.com/show_bug.cgi?id=707793
Patch
https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=1f21a45df0fa3abec4cff12951022b192dda3c00
Product
https://github.com/ArtifexSoftware/ghostpdl/blob/master/doc/News.html
Third Party Advisory
https://www.suse.com/support/update/announcement/2024/suse-su-20243942-1/
lists.debian.org
https://lists.debian.org/debian-lts-announce/2024/11/msg00023.html
More from Ghostscript
7.8
CVE-2017-8291
Artifex Ghostscript Type Confusion Vulnerability
9.9
CVE-2021-3781
A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command
9.8
CVE-2025-27837
An issue was discovered in Artifex Ghostscript before 10.05.0
9.8
CVE-2025-27836
An issue was discovered in Artifex Ghostscript before 10.05.0
9.8
CVE-2025-27832
An issue was discovered in Artifex Ghostscript before 10.05.0