Artifex Ghostscript: (CVE-2024-29508) Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc.

Artifex Ghostscript: (CVE-2024-29508) Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc.

Severity

2

CVSS

(AV:L/AC:L/Au:S/C:P/I:N/A:N)

Published

07/03/2024

Created

07/10/2024

Added

07/08/2024

Modified

01/28/2025

Description

Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc.

Solution(s)

• ghostscript-upgrade-10_03_0

References

• https://attackerkb.com/topics/cve-2024-29508
• CVE - 2024-29508