CVE-2024-46953

⚠️ high

Summary

An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string (for the output filename) results in path truncation, and possible path traversal and code execution.

CVSS Score

7.8

High

EPSS Score

0.1

Exploit Probability

Published Date

2024-11-10

First Seen: 2026-01-05

📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 69.5% of all 335,456 vulnerabilities in our database.

#102,195

Above average severity

Severity Percentile

🎯 CISA SSVC Assessment Updated: Nov 12, 2024

🔍 Exploitation Status

None

No known exploits

⚙️ Automatable

Requires human interaction

💥 Technical Impact

Total

Complete system compromise possible

SSVC data provided by CISA

Last Modified 2025-11-03

Source NVD 🔗

CVSS Vector 3.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE IDs (Weakness Types)

CWE-190

📦 Affected Products 5

Vendor	Product	Status	Affected Versions
debian	debian_linux	Affected	v12.0
suse	linux_enterprise_server	Affected	v12
artifex	ghostscript	Affected	< 10.04.0
suse	linux_enterprise_server_for_sap	Affected	v12
suse	linux_enterprise_high_performance_computing	Affected	v12.0

🔗 References 5

https://bugs.ghostscript.com/show_bug.cgi?id=707793

Permissions Required

https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostp...

Patch

https://github.com/ArtifexSoftware/ghostpdl/blob/mas...

Product

https://www.suse.com/support/update/announcement/202...

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2024/11...

🔗 Related CVEs 6

CVE ID	Severity	CVSS	EPSS	Summary	Published
CVE-2026-14355	🔶 medium	5.6	0.3	In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, 8.5.* before 8.5.8, the AES-WRAP-PAD algo...	2026-07-03
CVE-2026-56968	ℹ️ low	3.7	0.2	GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could...	2026-06-23
CVE-2026-49975	⚠️ high	7.5	11.5	Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service vi...	2026-06-08
CVE-2026-46333	⚠️ high	7.1	1.4	In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The ...	2026-05-15
CVE-2026-31431	⚠️ high	7.8	96.3	In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-pla...	2026-04-22
CVE-2026-41082	⚠️ high	7.3	0.2	In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.	2026-04-16

These CVEs affect the same products