CVE-2024-46953: Artifex Ghostscript

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string (for the output filename) results in path truncation, and possible path traversal and code execution.

Affected products

• Artifex Ghostscript: before 10.04.0 (fixed in 10.04.0)
• Debian Debian Linux: version 12.0 only
• Suse Linux Enterprise High Performance Computing: version 12.0 only
• Suse Linux Enterprise Server: version 12 only
• Suse Linux Enterprise Server For SAP: version 12 only

Published 2024-11-10. Last modified 2026-06-17.