Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2024-46952

An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (related to W array values).

VectorLOCAL

PublishedNov 10, 2024, 22:15

Published Bycve@mitre.org

Base Score

Score7.8

Affected Versions

No affected versions found.

References

https://bugs.ghostscript.com/show_bug.cgi?id=708001
https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=b1f0827c30f59a2dcbc8a39e42cace7a1de35f7f
https://github.com/ArtifexSoftware/ghostpdl/blob/master/doc/News.html

Weakness Type

CWE-120

CVSS Metrics

Base Score

7.8

Vector String

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Base SeverityHigh

Version

3.1

Attack Vector (AV)

LOCAL