CVE-2024-29508

CVSS 3.1: 3.3 low
EPSS: <1%p31
Published: Jul 3, 2024 · Jul 3, 2024
Modified: Jun 17, 2026

Analyze CVE-2024-29508 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdf_base_font_alloc.

Vendors: artifex

Products: ghostscript

Weakness: CWE-122

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news

1 story

Critical Ghostscript flaw exploited in the wild. Patch it now!

Security AffairsJul 8, 18:12 UTC · Jul 8, 2024Exploit / PoCExploitedCVE-2024-29510 CVE-2024-29509 CVE-2024-29506+34