CVE-2024-46954: Artifex Ghostscript

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ directory traversal.

Affected products

• Artifex Ghostscript: before 10.04.0 (fixed in 10.04.0)

Published 2024-11-10. Last modified 2026-06-17.