CVE-2024-46952: Artifex Ghostscript

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (related to W array values).

Affected products

• Artifex Ghostscript: before 10.04.0 (fixed in 10.04.0)
• Debian Debian Linux: version 12.0 only

Published 2024-11-10. Last modified 2026-06-17.