CVE-2024-46952

An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a...

7.8 HighFix available

An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (related to W array values).

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.32%Up 0.3 points since Nov 11, 2024

What each source reports

NVD Score used 7.8

An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (related to W array values).

Record: CVE-2024-46952
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1: 8.4 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-120
Updated: 2026-11-02

CVE List 8.4

An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (related to W array values).

Record: CVE-2024-46952
CVSS 3.1: 8.4 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-120
Updated: 2026-11-02

EUVDEUVD-2024-42155 8.4

An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (related to W array values).

Record: EUVD-2024-42155
CVSS 3.1: 8.4 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-03

GitHub AdvisoriesGHSA-mvm7-2x9x-6r3g 8.4

An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a...

An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (related to W array values).

Record: GHSA-mvm7-2x9x-6r3g
CVSS 3.1: 8.4 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-120
Updated: 2026-11-02

OSVALPINE-CVE-2024-46952 7.8

An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (related to W array values).

Record: ALPINE-CVE-2024-46952
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-03

OSVBELL-CVE-2024-46952 7.8

Record: BELL-CVE-2024-46952
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 16 moreShow less

OSV 8.4

An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (related to W array values).

Record: CVE-2024-46952
CVSS 3.1: 8.4 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2024-46952 7.8

An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (related to W array values).

Record: DEBIAN-CVE-2024-46952
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-2355 7.8

ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.

Security Fix(es):

VUL-0: CVE-2024-46951: ghostscript: Arbitrary code execution via unchecked "Implementation" pointer in "Pattern" color space(CVE-2024-46951)

VUL-0: CVE-2024-46952: ghostscript: Buffer overflow in PDF XRef stream(CVE-2024-46952)

VUL-0: CVE-2024-46955: ghostscript: Out of bounds read when reading color in "Indexed" color space(CVE-2024-46955)

Record: OESA-2024-2355
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-2357 7.8

ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.

Security Fix(es):

VUL-0: CVE-2024-46951: ghostscript: Arbitrary code execution via unchecked "Implementation" pointer in "Pattern" color space(CVE-2024-46951)

VUL-0: CVE-2024-46952: ghostscript: Buffer overflow in PDF XRef stream(CVE-2024-46952)

Record: OESA-2024-2357
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-2358 7.8

ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.

Security Fix(es):

VUL-0: CVE-2024-46951: ghostscript: Arbitrary code execution via unchecked "Implementation" pointer in "Pattern" color space(CVE-2024-46951)

VUL-0: CVE-2024-46952: ghostscript: Buffer overflow in PDF XRef stream(CVE-2024-46952)

Record: OESA-2024-2358
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2024-2359 7.8

ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library.

Security Fix(es):

VUL-0: CVE-2024-46951: ghostscript: Arbitrary code execution via unchecked "Implementation" pointer in "Pattern" color space(CVE-2024-46951)

VUL-0: CVE-2024-46952: ghostscript: Buffer overflow in PDF XRef stream(CVE-2024-46952)

VUL-0: CVE-2024-46955: ghostscript: Out of bounds read when reading color in "Indexed" color space(CVE-2024-46955)

Record: OESA-2024-2359
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:4362 7.8

Red Hat Security Advisory: ghostscript security update

Record: RHSA-2025:4362
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:7422 7.8

Red Hat Security Advisory: ghostscript security update

Record: RHSA-2025:7422
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:7499 7.8

Red Hat Security Advisory: ghostscript security update

Record: RHSA-2025:7499
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2025:4362 7.8

Moderate: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

ghostscript: heap buffer over write vulnerability in GhostScript's lp8000_print_page() in gdevlp8k.c (CVE-2020-27792)
ghostscript: dangling pointer in gdev_prn_open_printer_seekable() (CVE-2023-46751)
ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling (CVE-2024-46952)
ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (CVE-2024-46951)
ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding (CVE-2024-46954)
ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript (CVE-2024-46953)
ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution (CVE-2024-46956)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2025:4362
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2024-46952 7.8

An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (related to W array values).

Record: UBUNTU-CVE-2024-46952
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1: 8.4 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVALSA-2025:4362 No score

Moderate: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

ghostscript: heap buffer over write vulnerability in GhostScript's lp8000_print_page() in gdevlp8k.c (CVE-2020-27792)
ghostscript: dangling pointer in gdev_prn_open_printer_seekable() (CVE-2023-46751)
ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling (CVE-2024-46952)
ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (CVE-2024-46951)
ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding (CVE-2024-46954)
ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript (CVE-2024-46953)
ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution (CVE-2024-46956)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2025:4362
Updated: 2026-11-02

OSVALSA-2025:7422 No score

Moderate: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.

Security Fix(es):

ghostscript: dangling pointer in gdev_prn_open_printer_seekable() (CVE-2023-46751)
ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling (CVE-2024-46952)
ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (CVE-2024-46951)
ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding (CVE-2024-46954)
ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript (CVE-2024-46953)
ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution (CVE-2024-46956)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2025:7422
Updated: 2026-11-02

OSVMGASA-2024-0326 No score

Updated ghostscript packages fix security vulnerabilities

Amongst other general bug fixes, this release addresses: CVE-2024-46951 CVE-2024-46952 CVE-2024-46953 CVE-2024-46954 CVE-2024-46955 CVE-2024-46956

Record: MGASA-2024-0326
Updated: 2026-11-02

OSVopenSUSE-SU-2024:14423-1 No score

ghostscript-10.04.0-1.1 on GA media

These are all security issues fixed in the ghostscript-10.04.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:14423-1
Updated: 2026-11-02

OSVUSN-7103-1 No score

ghostscript vulnerabilities

It was discovered that Ghostscript incorrectly handled parsing certain PS files. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2024-46951, CVE-2024-46953, CVE-2024-46955, CVE-2024-46956)

It was discovered that Ghostscript incorrectly handled parsing certain PDF files. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 24.10. (CVE-2024-46952)

It was discovered that Ghostscript incorrectly handled parsing certain PS files. An attacker could use this issue to cause Ghostscript to crash, resulting in a denial of service, or possibly bypass file path validation. This issue only affected Ubuntu 24.04 LTS and Ubuntu 24.10. (CVE-2024-46954)

Record: USN-7103-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`ghostscript` Alpine:v3.18	before 10.04.0-r0	10.04.0-r0
`ghostscript` Alpine:v3.19	before 10.04.0-r0	10.04.0-r0
`ghostscript` Alpine:v3.20	before 10.04.0-r0	10.04.0-r0
`ghostscript` Alpine:v3.21	before 10.04.0-r0	10.04.0-r0
`ghostscript` Alpine:v3.22	before 10.04.0-r0	10.04.0-r0
`ghostscript` Alpine:v3.23	before 10.04.0-r0	10.04.0-r0
`ghostscript` Alpine:v3.24	before 10.04.0-r0	10.04.0-r0
`ghostscript` AlmaLinux:8 From an advisory covering 7 CVEs	before 9.27-16.el8_10	9.27-16.el8_10
`ghostscript-doc` AlmaLinux:8 From an advisory covering 7 CVEs	before 9.27-16.el8_10	9.27-16.el8_10
`ghostscript-tools-dvipdf` AlmaLinux:8 From an advisory covering 7 CVEs	before 9.27-16.el8_10	9.27-16.el8_10

Show 81 moreShow less

Affected packages
Package	Affected	Fixed
`ghostscript-tools-fonts` AlmaLinux:8 From an advisory covering 7 CVEs	before 9.27-16.el8_10	9.27-16.el8_10
`ghostscript-tools-printing` AlmaLinux:8 From an advisory covering 7 CVEs	before 9.27-16.el8_10	9.27-16.el8_10
`ghostscript-x11` AlmaLinux:8 From an advisory covering 7 CVEs	before 9.27-16.el8_10	9.27-16.el8_10
`libgs` AlmaLinux:8 From an advisory covering 7 CVEs	before 9.27-16.el8_10	9.27-16.el8_10
`libgs-devel` AlmaLinux:8 From an advisory covering 7 CVEs	before 9.27-16.el8_10	9.27-16.el8_10
`ghostscript` AlmaLinux:9 From an advisory covering 6 CVEs	before 9.54.0-18.el9_6	9.54.0-18.el9_6
`ghostscript-doc` AlmaLinux:9 From an advisory covering 6 CVEs	before 9.54.0-18.el9_6	9.54.0-18.el9_6
`ghostscript-tools-dvipdf` AlmaLinux:9 From an advisory covering 6 CVEs	before 9.54.0-18.el9_6	9.54.0-18.el9_6
`ghostscript-tools-fonts` AlmaLinux:9 From an advisory covering 6 CVEs	before 9.54.0-18.el9_6	9.54.0-18.el9_6
`ghostscript-tools-printing` AlmaLinux:9 From an advisory covering 6 CVEs	before 9.54.0-18.el9_6	9.54.0-18.el9_6
`ghostscript-x11` AlmaLinux:9 From an advisory covering 6 CVEs	before 9.54.0-18.el9_6	9.54.0-18.el9_6
`libgs` AlmaLinux:9 From an advisory covering 6 CVEs	before 9.54.0-18.el9_6	9.54.0-18.el9_6
`libgs-devel` AlmaLinux:9 From an advisory covering 6 CVEs	before 9.54.0-18.el9_6	9.54.0-18.el9_6
`ghostscript` Alpaquita:23	10.01.2-r2 up to 10.01.2-r3	10.01.2-r3
`ghostscript` Alpaquita:stream	10.03.1-r0 up to 10.04.0-r0	10.04.0-r0
`ghostscript` Debian:12	before 10.0.0~dfsg-11+deb12u6, plus listed versions 10.0.0~dfsg-1110.0.0~dfsg-11+deb12u110.0.0~dfsg-11+deb12u210.0.0~dfsg-11+deb12u310.0.0~dfsg-11+deb12u410.0.0~dfsg-11+deb12u5	10.0.0~dfsg-11+deb12u6
`ghostscript` Debian:13	before 10.04.0~dfsg-1	10.04.0~dfsg-1
`ghostscript` Debian:14	before 10.04.0~dfsg-1	10.04.0~dfsg-1
`ghostscript` Debian:12 From an advisory covering 5 CVEs	before 10.0.0~dfsg-11+deb12u6, plus listed versions 10.0.0~dfsg-1110.0.0~dfsg-11+deb12u110.0.0~dfsg-11+deb12u210.0.0~dfsg-11+deb12u310.0.0~dfsg-11+deb12u410.0.0~dfsg-11+deb12u5	10.0.0~dfsg-11+deb12u6
`ghostscript` Mageia:9 From an advisory covering 6 CVEs	before 10.04.0-1.mga9	10.04.0-1.mga9
`ghostscript` openEuler:22.03-LTS-SP3 From an advisory covering 3 CVEs	before 9.55.0-16.oe2203sp3	9.55.0-16.oe2203sp3
`ghostscript` openEuler:22.03-LTS-SP1 From an advisory covering 2 CVEs	before 9.55.0-15.oe2203sp1	9.55.0-15.oe2203sp1
`ghostscript` openEuler:24.03-LTS From an advisory covering 2 CVEs	before 9.56.1-12.oe2403	9.56.1-12.oe2403
`ghostscript` openEuler:22.03-LTS-SP4 From an advisory covering 3 CVEs	before 9.55.0-17.oe2203sp4	9.55.0-17.oe2203sp4
`ghostscript` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 0:9.27-16.el8_10	0:9.27-16.el8_10
`ghostscript-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 0:9.27-16.el8_10	0:9.27-16.el8_10
`ghostscript-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 0:9.27-16.el8_10	0:9.27-16.el8_10
`ghostscript-gtk-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 0:9.27-16.el8_10	0:9.27-16.el8_10
`ghostscript-x11` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 0:9.27-16.el8_10	0:9.27-16.el8_10
`ghostscript-x11-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 0:9.27-16.el8_10	0:9.27-16.el8_10
`libgs` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 0:9.27-16.el8_10	0:9.27-16.el8_10
`libgs-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 7 CVEs	before 0:9.27-16.el8_10	0:9.27-16.el8_10
`ghostscript-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 0:9.27-16.el8_10	0:9.27-16.el8_10
`ghostscript-debugsource` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 0:9.27-16.el8_10	0:9.27-16.el8_10
`ghostscript-doc` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 0:9.27-16.el8_10	0:9.27-16.el8_10
`ghostscript-gtk-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 0:9.27-16.el8_10	0:9.27-16.el8_10
`ghostscript-tools-dvipdf` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 0:9.27-16.el8_10	0:9.27-16.el8_10
`ghostscript-tools-fonts` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 0:9.27-16.el8_10	0:9.27-16.el8_10
`ghostscript-tools-printing` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 0:9.27-16.el8_10	0:9.27-16.el8_10
`ghostscript-x11-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 0:9.27-16.el8_10	0:9.27-16.el8_10
`libgs-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 0:9.27-16.el8_10	0:9.27-16.el8_10
`libgs-devel` Red Hat:enterprise_linux:8::crb From an advisory covering 7 CVEs	before 0:9.27-16.el8_10	0:9.27-16.el8_10
`ghostscript` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:9.54.0-18.el9_6	0:9.54.0-18.el9_6
`ghostscript-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:9.54.0-18.el9_6	0:9.54.0-18.el9_6
`ghostscript-debugsource` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:9.54.0-18.el9_6	0:9.54.0-18.el9_6
`ghostscript-doc` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:9.54.0-18.el9_6	0:9.54.0-18.el9_6
`ghostscript-gtk-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:9.54.0-18.el9_6	0:9.54.0-18.el9_6
`ghostscript-tools-dvipdf` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:9.54.0-18.el9_6	0:9.54.0-18.el9_6
`ghostscript-tools-fonts` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:9.54.0-18.el9_6	0:9.54.0-18.el9_6
`ghostscript-tools-printing` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:9.54.0-18.el9_6	0:9.54.0-18.el9_6
`ghostscript-x11` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:9.54.0-18.el9_6	0:9.54.0-18.el9_6
`ghostscript-x11-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:9.54.0-18.el9_6	0:9.54.0-18.el9_6
`libgs` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:9.54.0-18.el9_6	0:9.54.0-18.el9_6
`libgs-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 6 CVEs	before 0:9.54.0-18.el9_6	0:9.54.0-18.el9_6
`ghostscript` Red Hat:enterprise_linux:9::crb From an advisory covering 6 CVEs	before 0:9.54.0-18.el9_6	0:9.54.0-18.el9_6
`ghostscript-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 6 CVEs	before 0:9.54.0-18.el9_6	0:9.54.0-18.el9_6
`ghostscript-debugsource` Red Hat:enterprise_linux:9::crb From an advisory covering 6 CVEs	before 0:9.54.0-18.el9_6	0:9.54.0-18.el9_6
`ghostscript-gtk-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 6 CVEs	before 0:9.54.0-18.el9_6	0:9.54.0-18.el9_6
`ghostscript-tools-fonts` Red Hat:enterprise_linux:9::crb From an advisory covering 6 CVEs	before 0:9.54.0-18.el9_6	0:9.54.0-18.el9_6
`ghostscript-tools-printing` Red Hat:enterprise_linux:9::crb From an advisory covering 6 CVEs	before 0:9.54.0-18.el9_6	0:9.54.0-18.el9_6
`ghostscript-x11-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 6 CVEs	before 0:9.54.0-18.el9_6	0:9.54.0-18.el9_6
`libgs-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 6 CVEs	before 0:9.54.0-18.el9_6	0:9.54.0-18.el9_6
`libgs-devel` Red Hat:enterprise_linux:9::crb From an advisory covering 6 CVEs	before 0:9.54.0-18.el9_6	0:9.54.0-18.el9_6
`ghostscript` Red Hat:enterprise_linux:10.0 From an advisory covering 5 CVEs	before 0:10.02.1-15.el10_0	0:10.02.1-15.el10_0
`ghostscript-debuginfo` Red Hat:enterprise_linux:10.0 From an advisory covering 5 CVEs	before 0:10.02.1-15.el10_0	0:10.02.1-15.el10_0
`ghostscript-debugsource` Red Hat:enterprise_linux:10.0 From an advisory covering 5 CVEs	before 0:10.02.1-15.el10_0	0:10.02.1-15.el10_0
`ghostscript-doc` Red Hat:enterprise_linux:10.0 From an advisory covering 5 CVEs	before 0:10.02.1-15.el10_0	0:10.02.1-15.el10_0
`ghostscript-gtk-debuginfo` Red Hat:enterprise_linux:10.0 From an advisory covering 5 CVEs	before 0:10.02.1-15.el10_0	0:10.02.1-15.el10_0
`ghostscript-tools-fonts` Red Hat:enterprise_linux:10.0 From an advisory covering 5 CVEs	before 0:10.02.1-15.el10_0	0:10.02.1-15.el10_0
`ghostscript-tools-printing` Red Hat:enterprise_linux:10.0 From an advisory covering 5 CVEs	before 0:10.02.1-15.el10_0	0:10.02.1-15.el10_0
`libgs` Red Hat:enterprise_linux:10.0 From an advisory covering 5 CVEs	before 0:10.02.1-15.el10_0	0:10.02.1-15.el10_0
`libgs-debuginfo` Red Hat:enterprise_linux:10.0 From an advisory covering 5 CVEs	before 0:10.02.1-15.el10_0	0:10.02.1-15.el10_0
`ghostscript-tools-dvipdf` Red Hat:enterprise_linux:10.0 From an advisory covering 5 CVEs	before 0:10.02.1-15.el10_0	0:10.02.1-15.el10_0
`libgs-devel` Red Hat:enterprise_linux:10.0 From an advisory covering 5 CVEs	before 0:10.02.1-15.el10_0	0:10.02.1-15.el10_0
`ghostscript` Rocky Linux:8 From an advisory covering 7 CVEs	before 0:9.27-16.el8_10	0:9.27-16.el8_10
`ghostscript` Ubuntu:22.04:LTS	before 9.55.0~dfsg1-0ubuntu5.10, plus listed versions 9.54.0~dfsg1-0ubuntu29.55.0~dfsg1-0ubuntu49.55.0~dfsg1-0ubuntu59.55.0~dfsg1-0ubuntu5.19.55.0~dfsg1-0ubuntu5.2 Show 6 moreShow less 9.55.0~dfsg1-0ubuntu5.39.55.0~dfsg1-0ubuntu5.49.55.0~dfsg1-0ubuntu5.59.55.0~dfsg1-0ubuntu5.69.55.0~dfsg1-0ubuntu5.79.55.0~dfsg1-0ubuntu5.9	9.55.0~dfsg1-0ubuntu5.10
`ghostscript` Ubuntu:24.04:LTS	before 10.02.1~dfsg1-0ubuntu7.4, plus listed versions 10.01.2~dfsg1-0ubuntu210.01.2~dfsg1-0ubuntu2.110.02.1~dfsg1-0ubuntu110.02.1~dfsg1-0ubuntu210.02.1~dfsg1-0ubuntu5 Show 4 moreShow less 10.02.1~dfsg1-0ubuntu610.02.1~dfsg1-0ubuntu710.02.1~dfsg1-0ubuntu7.110.02.1~dfsg1-0ubuntu7.3	10.02.1~dfsg1-0ubuntu7.4
`ghostscript` Ubuntu:20.04:LTS From an advisory covering 6 CVEs	before 9.50~dfsg-5ubuntu4.14, plus listed versions 9.27~dfsg+0-0ubuntu39.27~dfsg+0-0ubuntu49.50~dfsg-5ubuntu19.50~dfsg-5ubuntu29.50~dfsg-5ubuntu3 Show 14 moreShow less 9.50~dfsg-5ubuntu49.50~dfsg-5ubuntu4.19.50~dfsg-5ubuntu4.29.50~dfsg-5ubuntu4.39.50~dfsg-5ubuntu4.49.50~dfsg-5ubuntu4.59.50~dfsg-5ubuntu4.69.50~dfsg-5ubuntu4.79.50~dfsg-5ubuntu4.89.50~dfsg-5ubuntu4.99.50~dfsg-5ubuntu4.109.50~dfsg-5ubuntu4.119.50~dfsg-5ubuntu4.129.50~dfsg-5ubuntu4.13	9.50~dfsg-5ubuntu4.14
`ghostscript` Ubuntu:22.04:LTS From an advisory covering 6 CVEs	before 9.55.0~dfsg1-0ubuntu5.10, plus listed versions 9.54.0~dfsg1-0ubuntu29.55.0~dfsg1-0ubuntu49.55.0~dfsg1-0ubuntu59.55.0~dfsg1-0ubuntu5.19.55.0~dfsg1-0ubuntu5.2 Show 6 moreShow less 9.55.0~dfsg1-0ubuntu5.39.55.0~dfsg1-0ubuntu5.49.55.0~dfsg1-0ubuntu5.59.55.0~dfsg1-0ubuntu5.69.55.0~dfsg1-0ubuntu5.79.55.0~dfsg1-0ubuntu5.9	9.55.0~dfsg1-0ubuntu5.10
`ghostscript` Ubuntu:24.04:LTS From an advisory covering 6 CVEs	before 10.02.1~dfsg1-0ubuntu7.4, plus listed versions 10.01.2~dfsg1-0ubuntu210.01.2~dfsg1-0ubuntu2.110.02.1~dfsg1-0ubuntu110.02.1~dfsg1-0ubuntu210.02.1~dfsg1-0ubuntu5 Show 4 moreShow less 10.02.1~dfsg1-0ubuntu610.02.1~dfsg1-0ubuntu710.02.1~dfsg1-0ubuntu7.110.02.1~dfsg1-0ubuntu7.3	10.02.1~dfsg1-0ubuntu7.4
`ghostscript` openSUSE:Tumbleweed From an advisory covering 6 CVEs	before 10.04.0-1.1	10.04.0-1.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	affected	OSV
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-46952 is a high vulnerability (CVSS 7.8) in Artifex Ghostscript, published October 5, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 24th percentile. Fixed in ghostscript 10.04.0-r0.

References

Show 78 moreShow less