{"id":"CVE-2024-46954","aliases":["ALPINE-CVE-2024-46954","ALSA-2025:4362","ALSA-2025:7422","BELL-CVE-2024-46954","CLSA-2025-1751892809","DEBIAN-CVE-2024-46954","EUVD-2024-42157","GHSA-2v5c-72gh-q5f7","MGASA-2024-0326","RHSA-2025:4362","RHSA-2025:7422","RHSA-2025:7499","RLSA-2025:4362","UBUNTU-CVE-2024-46954","USN-7103-1","openSUSE-SU-2024:14423-1"],"status":"published","title":"An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0....","description":"An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00546,"percentile":0.46282,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-22"],"published":"2024-10-05T22:55:02Z","modified":"2026-11-03T06:32:50Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"ghostscript","fixed_in":["10.04.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"ghostscript","fixed_in":["10.04.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"ghostscript","fixed_in":["10.04.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"ghostscript","fixed_in":["10.04.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"ghostscript","fixed_in":["10.04.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"ghostscript","fixed_in":["10.04.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"ghostscript","fixed_in":["10.04.0-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"ghostscript","fixed_in":["10.01.2-r3"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"ghostscript","fixed_in":["10.04.0-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript","fixed_in":["9.54.0-11.el9_2.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-doc","fixed_in":["9.54.0-11.el9_2.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-gtk","fixed_in":["9.54.0-11.el9_2.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-tools-dvipdf","fixed_in":["9.54.0-11.el9_2.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-tools-fonts","fixed_in":["9.54.0-11.el9_2.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-tools-printing","fixed_in":["9.54.0-11.el9_2.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-x11","fixed_in":["9.54.0-11.el9_2.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libgs","fixed_in":["9.54.0-11.el9_2.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libgs-devel","fixed_in":["9.54.0-11.el9_2.tuxcare.els9"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ghostscript","fixed_in":["10.04.0~dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ghostscript","fixed_in":["10.04.0~dfsg-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"ghostscript","fixed_in":["10.02.1~dfsg1-0ubuntu7.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.04.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.04.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.04.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.04.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.04.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.04.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.04.0-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.27-16.el8_10"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ghostscript-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.27-16.el8_10"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ghostscript-tools-dvipdf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.27-16.el8_10"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ghostscript-tools-fonts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.27-16.el8_10"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ghostscript-tools-printing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.27-16.el8_10"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ghostscript-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.27-16.el8_10"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libgs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.27-16.el8_10"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libgs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.27-16.el8_10"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ghostscript-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ghostscript-tools-dvipdf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ghostscript-tools-fonts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ghostscript-tools-printing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ghostscript-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libgs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libgs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Alpaquita:23","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.01.2-r2"},{"fixed":"10.01.2-r3"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.03.1-r0"},{"fixed":"10.04.0-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-tools-dvipdf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-tools-fonts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-tools-printing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"ghostscript-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libgs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libgs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.54.0-11.el9_2.tuxcare.els9"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.04.0~dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.04.0~dfsg-1"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.04.0-1.mga9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.27-16.el8_10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ghostscript-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.27-16.el8_10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ghostscript-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.27-16.el8_10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ghostscript-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.27-16.el8_10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ghostscript-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.27-16.el8_10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"ghostscript-x11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.27-16.el8_10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libgs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.27-16.el8_10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libgs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.27-16.el8_10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"ghostscript-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.27-16.el8_10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"ghostscript-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.27-16.el8_10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"ghostscript-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.27-16.el8_10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"ghostscript-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.27-16.el8_10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"ghostscript-tools-dvipdf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.27-16.el8_10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"ghostscript-tools-fonts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.27-16.el8_10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"ghostscript-tools-printing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.27-16.el8_10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"ghostscript-x11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.27-16.el8_10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libgs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.27-16.el8_10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libgs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.27-16.el8_10"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ghostscript-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ghostscript-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ghostscript-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ghostscript-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ghostscript-tools-dvipdf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ghostscript-tools-fonts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ghostscript-tools-printing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ghostscript-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"ghostscript-x11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libgs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libgs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"ghostscript-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"ghostscript-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"ghostscript-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"ghostscript-tools-fonts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"ghostscript-tools-printing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"ghostscript-x11-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libgs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libgs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.54.0-18.el9_6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.02.1-15.el10_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"ghostscript-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.02.1-15.el10_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"ghostscript-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.02.1-15.el10_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"ghostscript-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.02.1-15.el10_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"ghostscript-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.02.1-15.el10_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"ghostscript-tools-fonts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.02.1-15.el10_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"ghostscript-tools-printing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.02.1-15.el10_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"libgs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.02.1-15.el10_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"libgs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.02.1-15.el10_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"ghostscript-tools-dvipdf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.02.1-15.el10_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"libgs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.02.1-15.el10_0"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.27-16.el8_10"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.02.1~dfsg1-0ubuntu7.4"}]}],"versions":["10.01.2~dfsg1-0ubuntu2","10.01.2~dfsg1-0ubuntu2.1","10.02.1~dfsg1-0ubuntu1","10.02.1~dfsg1-0ubuntu2","10.02.1~dfsg1-0ubuntu5","10.02.1~dfsg1-0ubuntu6","10.02.1~dfsg1-0ubuntu7","10.02.1~dfsg1-0ubuntu7.1","10.02.1~dfsg1-0ubuntu7.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.50~dfsg-5ubuntu4.14"}]}],"versions":["9.27~dfsg+0-0ubuntu3","9.27~dfsg+0-0ubuntu4","9.50~dfsg-5ubuntu1","9.50~dfsg-5ubuntu2","9.50~dfsg-5ubuntu3","9.50~dfsg-5ubuntu4","9.50~dfsg-5ubuntu4.1","9.50~dfsg-5ubuntu4.2","9.50~dfsg-5ubuntu4.3","9.50~dfsg-5ubuntu4.4","9.50~dfsg-5ubuntu4.5","9.50~dfsg-5ubuntu4.6","9.50~dfsg-5ubuntu4.7","9.50~dfsg-5ubuntu4.8","9.50~dfsg-5ubuntu4.9","9.50~dfsg-5ubuntu4.10","9.50~dfsg-5ubuntu4.11","9.50~dfsg-5ubuntu4.12","9.50~dfsg-5ubuntu4.13"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.55.0~dfsg1-0ubuntu5.10"}]}],"versions":["9.54.0~dfsg1-0ubuntu2","9.55.0~dfsg1-0ubuntu4","9.55.0~dfsg1-0ubuntu5","9.55.0~dfsg1-0ubuntu5.1","9.55.0~dfsg1-0ubuntu5.2","9.55.0~dfsg1-0ubuntu5.3","9.55.0~dfsg1-0ubuntu5.4","9.55.0~dfsg1-0ubuntu5.5","9.55.0~dfsg1-0ubuntu5.6","9.55.0~dfsg1-0ubuntu5.7","9.55.0~dfsg1-0ubuntu5.9"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.02.1~dfsg1-0ubuntu7.4"}]}],"versions":["10.01.2~dfsg1-0ubuntu2","10.01.2~dfsg1-0ubuntu2.1","10.02.1~dfsg1-0ubuntu1","10.02.1~dfsg1-0ubuntu2","10.02.1~dfsg1-0ubuntu5","10.02.1~dfsg1-0ubuntu6","10.02.1~dfsg1-0ubuntu7","10.02.1~dfsg1-0ubuntu7.1","10.02.1~dfsg1-0ubuntu7.3"],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ghostscript","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.04.0-1.1"}]}],"bundled":6}],"products":[{"vendor":"artifex","product":"ghostscript"}],"references":[{"url":"https://bugs.ghostscript.com/show_bug.cgi?id=707788","tags":["Permissions Required","web","article"]},{"url":"https://github.com/ArtifexSoftware/ghostpdl/blob/master/doc/News.html","tags":["Product","web","article"]},{"url":"https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=55f587dd039282316f512e1bea64218fd991f934","tags":["Patch","web","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-46954","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-2v5c-72gh-q5f7"},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-46954","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:4362","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-27792","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-46751","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-46951","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-46952","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-46953","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-46954","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-46956","tags":["report"]},{"url":"https://bugzilla.redhat.com/2247179","tags":["report"]},{"url":"https://bugzilla.redhat.com/2253365","tags":["report"]},{"url":"https://bugzilla.redhat.com/2325041","tags":["report"]},{"url":"https://bugzilla.redhat.com/2325043","tags":["report"]},{"url":"https://bugzilla.redhat.com/2325044","tags":["report"]},{"url":"https://bugzilla.redhat.com/2325045","tags":["report"]},{"url":"https://bugzilla.redhat.com/2325047","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-4362.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:7422","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-7422.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-46954","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1751892809.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46954.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-46954","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0326.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33597","tags":["report"]},{"url":"https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/tag/gs10040","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2247179","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253365","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2325041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2325043","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2325044","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2325045","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2325047","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4362.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27792","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27792","tags":["advisory"]},{"url":"https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=4f6bc662909ab79e8fbe9822afb36e8a0eafc2b7","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-46751","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46751","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-46951","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-46951","tags":["advisory"]},{"url":"https://bugs.ghostscript.com/show_bug.cgi?id=707991","tags":["article"]},{"url":"https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f49812186baa7d1362880673408a6fbe8719b4f8","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243942-1/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-46952","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-46952","tags":["advisory"]},{"url":"https://bugs.ghostscript.com/show_bug.cgi?id=708001","tags":["article"]},{"url":"https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=b1f0827c30f59a2dcbc8a39e42cace7a1de35f7f","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-46953","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-46953","tags":["advisory"]},{"url":"https://bugs.ghostscript.com/show_bug.cgi?id=707793","tags":["article"]},{"url":"https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=1f21a45df0fa3abec4cff12951022b192dda3c00","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-46954","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-46956","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-46956","tags":["advisory"]},{"url":"https://bugs.ghostscript.com/show_bug.cgi?id=707895","tags":["article"]},{"url":"https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f4151f12db32cd3ed26c24327de714bf2c3ed6ca","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7422.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:7499","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7499.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:4362","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-46954","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7103-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-46951","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-46952","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-46953","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-46955","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-46956","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46955","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-46956","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-46954","description":"An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal.","status":"published","published":"2024-11-10T00:00:00Z","modified":"2024-11-12T20:26:23.499Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:34:08.500935Z"}],"euvd":[{"id":"EUVD-2024-42157","description":"An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal.","status":"published","published":"2024-11-10T00:00:00Z","modified":"2024-11-12T20:26:23Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:05:03.478844Z"}],"ghsa":[{"id":"GHSA-2v5c-72gh-q5f7","title":"An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0....","description":"An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal.","status":"published","published":"2024-11-11T00:30:43Z","modified":"2024-11-13T00:31:54Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:58:48.700326Z"}],"nvd":[{"id":"CVE-2024-46954","description":"An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal.","status":"published","published":"2024-11-10T22:15:12.813Z","modified":"2026-06-17T07:56:15.277Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:10:36.560164Z"}],"osv":[{"id":"ALPINE-CVE-2024-46954","description":"An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal.","status":"published","published":"2024-11-10T22:15:12.813Z","modified":"2026-11-03T06:32:50.010677872Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:16:46.202932Z"},{"id":"BELL-CVE-2024-46954","status":"published","published":"2024-10-07T09:16:28.959717Z","modified":"2026-01-26T09:38:32.982576Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:20.452786Z"},{"id":"CVE-2024-46954","description":"An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal.","status":"published","published":"2024-11-10T00:00:00Z","modified":"2026-10-28T10:51:22.675333585Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:43.253252Z"},{"id":"DEBIAN-CVE-2024-46954","description":"An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal.","status":"published","published":"2024-11-10T22:15:12.813Z","modified":"2026-11-02T12:02:50.305775088Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:43.798789Z"},{"id":"RHSA-2025:4362","title":"Red Hat Security Advisory: ghostscript security update","status":"published","published":"2025-04-30T10:03:03Z","modified":"2026-08-07T10:20:09Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:7422","title":"Red Hat Security Advisory: ghostscript security update","status":"published","published":"2025-05-14T10:06:17Z","modified":"2026-06-26T12:22:40.362844486Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:7499","title":"Red Hat Security Advisory: ghostscript security update","status":"published","published":"2025-05-14T10:06:40Z","modified":"2026-06-26T12:22:34.790460034Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RLSA-2025:4362","title":"Moderate: ghostscript security update","description":"The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.\n\nSecurity Fix(es):\n\n* ghostscript: heap buffer over write vulnerability in GhostScript's lp8000_print_page() in gdevlp8k.c (CVE-2020-27792)\n\n* ghostscript: dangling pointer in gdev_prn_open_printer_seekable() (CVE-2023-46751)\n\n* ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling (CVE-2024-46952)\n\n* ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (CVE-2024-46951)\n\n* ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding (CVE-2024-46954)\n\n* ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript (CVE-2024-46953)\n\n* ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution (CVE-2024-46956)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:38:41.630147Z","modified":"2025-07-29T15:00:06.178037Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"UBUNTU-CVE-2024-46954","description":"An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal.","status":"published","published":"2024-10-30T00:00:00Z","modified":"2026-04-22T15:09:34.146687Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:02.636559Z"},{"id":"ALSA-2025:4362","title":"Moderate: ghostscript security update","description":"The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.  \n\nSecurity Fix(es):  \n\n  * ghostscript: heap buffer over write vulnerability in GhostScript's lp8000_print_page() in gdevlp8k.c (CVE-2020-27792)\n  * ghostscript: dangling pointer in gdev_prn_open_printer_seekable() (CVE-2023-46751)\n  * ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling (CVE-2024-46952)\n  * ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (CVE-2024-46951)\n  * ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding (CVE-2024-46954)\n  * ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript (CVE-2024-46953)\n  * ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution (CVE-2024-46956)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-04-30T00:00:00Z","modified":"2026-10-29T11:02:23.033701431Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:7422","title":"Moderate: ghostscript security update","description":"The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed.  \n\nSecurity Fix(es):  \n\n  * ghostscript: dangling pointer in gdev_prn_open_printer_seekable() (CVE-2023-46751)\n  * ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling (CVE-2024-46952)\n  * ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space (CVE-2024-46951)\n  * ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding (CVE-2024-46954)\n  * ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript (CVE-2024-46953)\n  * ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution (CVE-2024-46956)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-05-13T00:00:00Z","modified":"2026-10-29T11:32:29.97348274Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"CLSA-2025-1751892809","title":"ghostscript: Fix of CVE-2024-46954","description":"- CVE-2024-46954: fix decode_utf8 to forbid overlong encodings","status":"published","published":"2025-07-07T12:53:33Z","modified":"2026-06-01T00:31:06.47243714Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"MGASA-2024-0326","title":"Updated ghostscript packages fix security vulnerabilities","description":"Amongst other general bug fixes, this release addresses:\nCVE-2024-46951\nCVE-2024-46952\nCVE-2024-46953\nCVE-2024-46954\nCVE-2024-46955\nCVE-2024-46956\n","status":"published","published":"2024-10-05T22:55:02Z","modified":"2026-04-16T04:43:32.750302952Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:14423-1","title":"ghostscript-10.04.0-1.1 on GA media","description":"These are all security issues fixed in the ghostscript-10.04.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-10-23T00:00:00Z","modified":"2026-02-04T02:43:50.403827Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"USN-7103-1","title":"ghostscript vulnerabilities","description":"It was discovered that Ghostscript incorrectly handled parsing certain PS\nfiles. An attacker could use this issue to cause Ghostscript to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2024-46951, CVE-2024-46953, CVE-2024-46955, CVE-2024-46956)\n\nIt was discovered that Ghostscript incorrectly handled parsing certain PDF\nfiles. An attacker could use this issue to cause Ghostscript to crash,\nresulting in a denial of service, or possibly execute arbitrary code. This\nissue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 24.10.\n(CVE-2024-46952)\n\nIt was discovered that Ghostscript incorrectly handled parsing certain PS\nfiles. An attacker could use this issue to cause Ghostscript to crash,\nresulting in a denial of service, or possibly bypass file path validation.\nThis issue only affected Ubuntu 24.04 LTS and Ubuntu 24.10.\n(CVE-2024-46954)\n","status":"published","published":"2024-11-12T15:54:53Z","modified":"2026-04-22T10:53:07.248214Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}