CVE-2024-29511: Artifex Ghostscript

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Artifex Ghostscript before 10.03.1, when Tesseract is used for OCR, has a directory traversal issue that allows arbitrary file reading (and writing of error messages to arbitrary files) via OCRLanguage. For example, exploitation can use debug_file /tmp/out and user_patterns_file /etc/passwd.

Affected products

• Artifex Ghostscript: before 10.03.1 (fixed in 10.03.1)

Published 2024-07-03. Last modified 2026-06-17.