Stack-based Buffer Overflow Vulnerability in Ghostscript

CVE-2024-29507

Currently unrated 🤨

Key Information

Vendor: Artifex
Vendor: CVE Published:; 3 July 2024

Summary

Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters.

Refferences

https://bugs.ghostscript.com/show_bug.cgi?id=707510

https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdif...

https://www.openwall.com/lists/oss-security/2024/07/03/7

Timeline

Vulnerability published
Jul 3, 2024

Collectors

NVD Database

.