High severity7.8NVD Advisory· Published Nov 10, 2024· Updated Jun 17, 2026
CVE-2024-46952
CVE-2024-46952
Description
An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (related to W array values).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
13cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:*range: <10.04.0
- (no CPE)
- (no CPE)range: <10.0.4.0
- osv-coords9 versionspkg:rpm/almalinux/ghostscriptpkg:rpm/almalinux/ghostscript-docpkg:rpm/almalinux/ghostscript-tools-dvipdfpkg:rpm/almalinux/ghostscript-tools-fontspkg:rpm/almalinux/ghostscript-tools-printingpkg:rpm/almalinux/ghostscript-x11pkg:rpm/almalinux/libgspkg:rpm/almalinux/libgs-develpkg:rpm/opensuse/ghostscript&distro=openSUSE%20Tumbleweed
< 9.27-16.el8_10+ 8 more
- (no CPE)range: < 9.27-16.el8_10
- (no CPE)range: < 9.27-16.el8_10
- (no CPE)range: < 9.27-16.el8_10
- (no CPE)range: < 9.27-16.el8_10
- (no CPE)range: < 9.27-16.el8_10
- (no CPE)range: < 9.27-16.el8_10
- (no CPE)range: < 9.27-16.el8_10
- (no CPE)range: < 9.27-16.el8_10
- (no CPE)range: < 10.04.0-1.1
Patches
Vulnerability mechanics
References
3- cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/nvdPatch
- bugs.ghostscript.com/show_bug.cginvdPermissions Required
- github.com/ArtifexSoftware/ghostpdl/blob/master/doc/News.htmlnvdProduct
News mentions
0No linked articles in our index yet.