CVE-2024-46953

An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string (for the...

Original description

The description as published by the source.

An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string (for the output filename) results in path truncation, and possible path traversal and code execution.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2024-46953 ghostscript Fixed in: 9.53.3~dfsg-7+deb11u9

References

advisory github.com
advisory nvd.nist.gov
web bugs.ghostscript.com
web cgit.ghostscript.com
web github.com
web lists.debian.org
web suse.com