CVE-2025-46646: Artifex Ghostscript

Medium severity, CVSS 4.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In Artifex Ghostscript before 10.05.0, decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8 encoding. NOTE: this issue exists because of an incomplete fix for CVE-2024-46954.

Affected products

• Artifex Ghostscript: before 10.05.0 (fixed in 10.05.0)

Published 2025-04-26. Last modified 2026-06-17.