CVE-2024-46956 json
An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0.
published 2024-11-10 23 mo ago modified 2026-06-17 4 mo ago also EUVD-2024-42159
- cvss
- 7.8
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 33%
- public exploits
- 0
- none known
Summary
An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforall can lead to arbitrary code execution.
Patch / fix
- artifex ghostscript 10.04.0
- ghostscript ghostscript 10.04.0
- ghostscript Debian 12 10.0.0~dfsg-11+deb12u6
- ghostscript Debian 14, Debian 13 10.04.0~dfsg-1
debian advisories DEBIAN-CVE-2024-46956
- ghostscript Ubuntu 20.04 LTS 9.50~dfsg-5ubuntu4.14
- ghostscript Ubuntu 22.04 LTS 9.55.0~dfsg1-0ubuntu5.10
- ghostscript Ubuntu 24.04 LTS 10.02.1~dfsg1-0ubuntu7.4
- ghostscript Ubuntu Pro 16.04 LTS 9.26~dfsg+0-0ubuntu0.16.04.14+esm8
- ghostscript Ubuntu Pro 18.04 LTS 9.26~dfsg+0-0ubuntu0.18.04.18+esm3
ubuntu advisories UBUNTU-CVE-2024-46956
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- ghostscript RHEL 10.0 10.02.1-15.el10_0
- libgs RHEL 10.0 10.02.1-15.el10_0
- ghostscript-tools-fonts RHEL 10.0 10.02.1-15.el10_0
- ghostscript-tools-dvipdf RHEL 10.0 10.02.1-15.el10_0
- ghostscript-tools-printing RHEL 10.0 10.02.1-15.el10_0
- ghostscript RHEL 9 9.54.0-18.el9_6
- libgs RHEL 9 9.54.0-18.el9_6
- ghostscript-x11 RHEL 9 9.54.0-18.el9_6
red hat advisories RHSA-2025:7499RHSA-2025:7422RHSA-2025:4362
- ghostscript SLES for SAP 15 SP4, SLES for SAP 15 SP3, SLES for SAP 15 SP2 +14 more 9.52-150000.200.1
- ghostscript SLES LTSS Extended Security 12 SP5, SLES 12 SP5-LTSS 9.52-23.86.1
suse advisories SUSE-SU-2024:3942-1SUSE-SU-2024:3941-1
- ghostscript openSUSE Tumbleweed 10.04.0-1.1
opensuse advisories openSUSE-SU-2024:14423-1
- ghostscript AlmaLinux 9 9.54.0-18.el9_6
- libgs AlmaLinux 9 9.54.0-18.el9_6
- ghostscript-x11 AlmaLinux 9 9.54.0-18.el9_6
- ghostscript-tools-fonts AlmaLinux 9 9.54.0-18.el9_6
- ghostscript-tools-dvipdf AlmaLinux 9 9.54.0-18.el9_6
- ghostscript-tools-printing AlmaLinux 9 9.54.0-18.el9_6
- ghostscript AlmaLinux 8 9.27-16.el8_10
- libgs AlmaLinux 8 9.27-16.el8_10
almalinux advisories ALSA-2025:7422ALSA-2025:4362
- ghostscript Rocky Linux 8 9.27-16.el8_10
rocky linux advisories RLSA-2025:4362
- ghostscript Alpine 3.24, Alpine 3.23, Alpine 3.22 +4 more 10.04.0-r0
alpine advisories ALPINE-CVE-2024-46956
Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2024-46956 updated cvss 7.8
ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution
-
Red Hat Enterprise Linux 7 libgs, ghostscript, ghostscript-gtk, ghostscript-cupsaffected: no fix planned “Out of support scope”
-
Red Hat Enterprise Linux 8 libgs, ghostscript, ghostscript-x11, ghostscript-tools-fonts, ghostscript-tools-dvipdf, ghostscript-tools-printingaffected: no fix planned “Will not fix”
-
Red Hat Enterprise Linux AppStream (v. 8) libgs 9.27-16.el8_10, ghostscript 9.27-16.el8_10, ghostscript-x11 9.27-16.el8_10fixed: vendor fix RHSA-2025:4362
-
Red Hat Enterprise Linux AppStream (v. 9) libgs 9.54.0-18.el9_6, ghostscript 9.54.0-18.el9_6, ghostscript-x11 9.54.0-18.el9_6, ghostscript-tools-fonts 9.54.0-18.el9_6, ghostscript-tools-dvipdf 9.54.0-18.el9_6, ghostscript-tools-printing 9.54.0-18.el9_6fixed: vendor fix RHSA-2025:7422
-
Red Hat Enterprise Linux AppStream (v. 10) libgs 10.02.1-15.el10_0, ghostscript 10.02.1-15.el10_0, ghostscript-tools-fonts 10.02.1-15.el10_0, ghostscript-tools-printing 10.02.1-15.el10_0fixed: vendor fix RHSA-2025:7499
-
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) ghostscript 9.54.0-18.el9_6, ghostscript-tools-fonts 9.54.0-18.el9_6, ghostscript-tools-printing 9.54.0-18.el9_6fixed: vendor fix RHSA-2025:7422
-
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) ghostscript-tools-dvipdf 10.02.1-15.el10_0fixed: vendor fix RHSA-2025:7499
-
Red Hat Enterprise Linux CRB (v. 8) ghostscript-tools-fonts 9.27-16.el8_10, ghostscript-tools-dvipdf 9.27-16.el8_10, ghostscript-tools-printing 9.27-16.el8_10fixed: vendor fix RHSA-2025:4362
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- total
- Assessed
- 15 mo ago
Exploit prediction
0.39% chance of exploitation in the next 30 days, higher than 33% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| CNA | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Affected products
- artifex ghostscript
Classification
- Weakness
-
- CWE-125 Out-of-bounds Read
References
-
cgit.ghostscript.com
/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f4151f12db32cd3ed26c24327de714bf2c3ed6ca
patch
-
bugs.ghostscript.com
/show_bug.cgi?id=707895
permissions-required
-
github.com
/ArtifexSoftware/ghostpdl/blob/master/doc/News.html
product
-
suse.com
/support/update/announcement/2024/suse-su-20243942-1/
third-party-advisory
- lists.debian.org /debian-lts-announce/2024/11/msg00023.html
Sources
- CVE List CVE-2024-46956
- NVD CVE-2024-46956
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.