CVE-2024-46954
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Nov 10, 2024
Updated: Nov 14, 2024
CWE ID 22
Summary
CVE-2024-46954 is a vulnerability affecting Artifex Ghostscript before version 10.04.0. The issue lies in the decode_utf8 function of base/gp_utf8.c. An overlong UTF-8 encoding can be exploited to traverse directories and potentially gain unauthorized access to sensitive information. This vulnerability could lead to significant security risks if not addressed promptly. Users are encouraged to update to a patched version of Ghostscript to mitigate this issue.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- GhostScript
Affected Vendors
- Artifex