Possible Unicode Encoding Error Leads to Directory Traversal

CVE-2024-46954

Summary

An issue found in the decode_utf8 function within base/gp_utf8.c of Artifex Ghostscript prior to version 10.04.0 presents a vulnerability where overlong UTF-8 encoding could lead to directory traversal. This flaw might allow attackers to exploit the file system, potentially granting them access to sensitive directories outside the intended file structure. Proper validation and error handling for UTF-8 data are critical to mitigate this risk and ensure secure operation.

References