CVE-2024-46953 An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0.

What is CVE-2024-46953?

CVE-2024-46953 is a high-severity vulnerability in Artifex Ghostscript, published on 10 Nov 2024.

Official description

An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string (for the output filename) results in path truncation, and possible path traversal and code execution.

Weakness: CWE-190

Which versions are affected by CVE-2024-46953?

It affects 5 products.

Products include Artifex Ghostscript, Debian Debian Linux, Suse Linux Enterprise High Performance Computing, Suse Linux Enterprise Server, Suse Linux Enterprise Server for Sap.

How do I fix CVE-2024-46953?

Upgrade to a fixed version.

Is CVE-2024-46953 being exploited?

There is no known exploitation of CVE-2024-46953 in the wild and no public exploit code.

Other vulnerabilities in Artifex Ghostscript

• CVE-2017-8291 Artifex Ghostscript Type Confusion Exploited High 7.8
• CVE-2021-3781 Command injection in ghostscript Critical 9.9
• CVE-2025-27831 Memory corruption in n/a Critical 9.8
• CVE-2025-27832 Memory corruption in n/a Critical 9.8
• CVE-2025-27836 Memory corruption in n/a Critical 9.8

All Artifex Ghostscript vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as ALPINE-CVE-2024-46953, BELL-CVE-2024-46953, CLSA-2025-1750783474, DEBIAN-CVE-2024-46953, GHSA-qxhf-m3mr-36x5, UBUNTU-CVE-2024-46953.