CVE-2024-29510

概要

参考情報

• bugs.ghostscript.com/show_bug.cgi · Issue Tracking
• codeanlabs.com/blog/research/cve-2024-29510-ghostscript-format-string-exploitation · Exploit
• openwall.com/lists/oss-security/2024/07/03/7 · Mailing List
• vicarius.io/vsociety/posts/critical-vulnerability-in-ghostscript-cve-2024-29510 · Exploit

ghostscript のその他の脆弱性

• CVE-2025-59800中 5.5In Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdevpdfocr.c has an integer overflow that leads to a heap-based buffer ove…
• CVE-2025-59799中 5.5Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfmark_coerce_dest in devices/vector/gdevpdfm.c via a large size v…
• CVE-2025-59798中 5.5Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdf_write_cmap in devices/vector/gdevpdtw.c.
• CVE-2025-48708低 3.3gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A create…
• CVE-2025-46646中 4.5In Artifex Ghostscript before 10.05.0, decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8 encoding. NOTE: this issue exists because of …