← Back

CVE-2024-46952

nvd nist
Published: Nov 10, 2024Modified: Nov 14, 2024

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (related to W array values).

Affected (2)

Artifex
1 product
Ghostscript
Debian
1 product
Debian Linux
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Ghostscript
Before 10.04.0
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Debian Linux
Version 12.0

Related CWEs

CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (3)

Source: cve@mitre.org
Permissions Required
Source: cve@mitre.org
Patch
Source: cve@mitre.org
Product

Timeline

No history available yet.