Most recent entries from all

bdu:2024-05558

BELL-CVE-2024-29506

Affected: Alpaquita:23: ghostscript, Alpaquita:stream: ghostscript

EUVD-2026-4644

fkie_cve-2024-29506

Artifex Ghostscript before 10.03.0 has a stack-based buffer overflow in the pdfi_apply_filter() function via a long PDF filter name.

GHSA-g5x6-xpv4-w4mm

Artifex Ghostscript before 10.03.0 has a stack-based buffer overflow in the pdfi_apply_filter() function via a long PDF filter name.

gsd-2024-29506

OESA-2026-2771 — ghostscript security update

Affected: openEuler:22.03-LTS-SP4: ghostscript

Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fix(es):

Artifex Ghostscript before 10.03.0 has a stack-based buffer overflow in the pdfi_apply_filter() function via a long PDF filter name.(CVE-2024-29506)

Artifex Ghostscript before 10.03.0 has a heap-based overflow when PDFPassword (e.g., for runpdf) has a \000 byte in the middle.(CVE-2024-29509)

Artifex Ghostscript before 10.03.1, when Tesseract is used for OCR, has a directory traversal issue that allows arbitrary file reading (and writing of error messages to arbitrary files) via OCRLanguage. For example, exploitation can use debug_file /tmp/out and user_patterns_file /etc/passwd.(CVE-2024-29511)

UBUNTU-CVE-2024-29506

Affected: Ubuntu:22.04:LTS: ghostscript, Ubuntu:24.04:LTS: ghostscript

Artifex Ghostscript before 10.03.0 has a stack-based buffer overflow in the pdfi_apply_filter() function via a long PDF filter name.

WID-SEC-W-2024-1525 — Ghostscript: Mehrere Schwachstellen

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Ghostscript ausnutzen, um einen Denial of Service Angriff durchzuführen, beliebigen Code auszuführen und Dateien zu manipulieren.