Most recent entries from all

bdu:2024-05559

BELL-CVE-2024-29508

Affected: Alpaquita:23: ghostscript, Alpaquita:stream: ghostscript

EUVD-2026-222945

fkie_cve-2024-29508

Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc.

GHSA-w2wv-53w9-5r3r

Artifex Ghostscript before 10.0.3.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc.

gsd-2024-29508

OESA-2024-2159 — ghostscript security update

Affected: openEuler:22.03-LTS-SP1: ghostscript

Ghostscript is an interpreter for PostScript™ and Portable Document Format (PDF) files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fix(es): Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc.(CVE-2024-29508) Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.(CVE-2024-29510)

SUSE-SU-2024:2547-1 — Security update for ghostscript

Security update for ghostscript

UBUNTU-CVE-2024-29508

Affected: Ubuntu:Pro:16.04:LTS: ghostscript, Ubuntu:Pro:18.04:LTS: ghostscript, Ubuntu:20.04:LTS: ghostscript, Ubuntu:22.04:LTS: ghostscript, Ubuntu:24.04:LTS: ghostscript

Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc.

WID-SEC-W-2024-1525 — Ghostscript: Mehrere Schwachstellen

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Ghostscript ausnutzen, um einen Denial of Service Angriff durchzuführen, beliebigen Code auszuführen und Dateien zu manipulieren.