Artifex

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-46956 3Artifex DebianSuse 5Debian Linux GhostscriptLinux Enterprise High Performance Computing+2 more Jun 17, 2026 Nov 10, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforall can lead to arbitrary code execution.
CVE-2024-46955 3Artifex DebianSuse 5Debian Linux GhostscriptLinux Enterprise High Performance Computing+2 more Jun 17, 2026 Nov 10, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color space.
CVE-2024-46954 1Artifex 1Ghostscript Jun 17, 2026 Nov 10, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal.
CVE-2024-46953 3Artifex DebianSuse 5Debian Linux GhostscriptLinux Enterprise High Performance Computing+2 more Jun 17, 2026 Nov 10, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string (for the output filename) results in path truncation, and possible path traver...Show more An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string (for the output filename) results in path truncation, and possible path traversal and code execution.Show less
CVE-2024-46952 2Artifex Debian 2Debian Linux Ghostscript Jun 17, 2026 Nov 10, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (related to W array values).
CVE-2024-46951 3Artifex DebianSuse 5Debian Linux GhostscriptLinux Enterprise High Performance Computing+2 more Jun 17, 2026 Nov 10, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation pointer in Pattern color space could lead to arbitrary code execution.
CVE-2024-33871 1Artifex 1Ghostscript Jun 17, 2026 Jul 3, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver library, exploitable via a crafted PostScript document. This occurs because the D...Show more An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver library, exploitable via a crafted PostScript document. This occurs because the Driver parameter for opvp (and oprp) devices can have an arbitrary name for a dynamic library; this library is then loaded.Show less
CVE-2024-33870 1Artifex 1Ghostscript Jun 17, 2026 Jul 3, 2024 N/A· v4 6.3 MEDIUM· v3 N/A· v2 An issue was discovered in Artifex Ghostscript before 10.03.1. There is path traversal (via a crafted PostScript document) to arbitrary files if the current directory is in the permitted paths. For example, there can be...Show more An issue was discovered in Artifex Ghostscript before 10.03.1. There is path traversal (via a crafted PostScript document) to arbitrary files if the current directory is in the permitted paths. For example, there can be a transformation of ../../foo to ./../../foo and this will grant access if ./ is permitted.Show less
CVE-2024-33869 1Artifex 1Ghostscript Jun 17, 2026 Jul 3, 2024 N/A· v4 5.3 MEDIUM· v3 N/A· v2 An issue was discovered in Artifex Ghostscript before 10.03.1. Path traversal and command execution can occur (via a crafted PostScript document) because of path reduction in base/gpmisc.c. For example, restrictions on u...Show more An issue was discovered in Artifex Ghostscript before 10.03.1. Path traversal and command execution can occur (via a crafted PostScript document) because of path reduction in base/gpmisc.c. For example, restrictions on use of %pipe% can be bypassed via the aa/../%pipe%command# output filename.Show less
CVE-2024-29511 1Artifex 1Ghostscript Jun 17, 2026 Jul 3, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Artifex Ghostscript before 10.03.1, when Tesseract is used for OCR, has a directory traversal issue that allows arbitrary file reading (and writing of error messages to arbitrary files) via OCRLanguage. For example, expl...Show more Artifex Ghostscript before 10.03.1, when Tesseract is used for OCR, has a directory traversal issue that allows arbitrary file reading (and writing of error messages to arbitrary files) via OCRLanguage. For example, exploitation can use debug_file /tmp/out and user_patterns_file /etc/passwd.Show less
CVE-2024-29510 1Artifex 1Ghostscript Jun 17, 2026 Jul 3, 2024 N/A· v4 6.3 MEDIUM· v3 N/A· v2 Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.
CVE-2024-29507 1Artifex 1Ghostscript Jun 17, 2026 Jul 3, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters.
CVE-2024-29509 1Artifex 1Ghostscript Jun 17, 2026 Jul 3, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Artifex Ghostscript before 10.03.0 has a heap-based overflow when PDFPassword (e.g., for runpdf) has a \000 byte in the middle.
CVE-2024-29508 1Artifex 1Ghostscript Jun 17, 2026 Jul 3, 2024 N/A· v4 3.3 LOW· v3 N/A· v2 Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc.
CVE-2024-29506 1Artifex 1Ghostscript Jun 17, 2026 Jul 3, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Artifex Ghostscript before 10.03.0 has a stack-based buffer overflow in the pdfi_apply_filter() function via a long PDF filter name.
CVE-2023-52722 1Artifex 1Ghostscript Jun 17, 2026 Apr 28, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An issue was discovered in Artifex Ghostscript before 10.03.1. psi/zmisc1.c, when SAFER mode is used, allows eexec seeds other than the Type 1 standard.
CVE-2024-24259 1Artifex 1Mupdf Jun 17, 2026 Feb 5, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 freeglut through 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddMenuEntry function.
CVE-2024-24258 1Artifex 1Mupdf Jun 17, 2026 Feb 5, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 freeglut 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddSubMenu function.
CVE-2020-36773 1Artifex 1Ghostscript Jun 17, 2026 Feb 4, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Artifex Ghostscript before 9.53.0 has an out-of-bounds write and use-after-free in devices/vector/gdevtxtw.c (for txtwrite) because a single character code in a PDF document can map to more than one Unicode code point (e...Show more Artifex Ghostscript before 9.53.0 has an out-of-bounds write and use-after-free in devices/vector/gdevtxtw.c (for txtwrite) because a single character code in a PDF document can map to more than one Unicode code point (e.g., for a ligature).Show less
CVE-2023-51107 1Artifex 1Mupdf Jun 17, 2026 Dec 26, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in functon compute_color() of jquant2.c. NOTE: this is disputed by the supplier because there was not reasonable evidence t...Show more A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in functon compute_color() of jquant2.c. NOTE: this is disputed by the supplier because there was not reasonable evidence to determine the existence of a vulnerability or identify the affected product.Show less

Previous 123 4 5...13 Next