CVE-2024-46956 An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0.

What is CVE-2024-46956?

CVE-2024-46956 is a high-severity vulnerability in Artifex Ghostscript, published on 10 Nov 2024.

Official description

An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforall can lead to arbitrary code execution.

Weakness: CWE-125

Which versions are affected by CVE-2024-46956?

It affects 5 products.

Products include Artifex Ghostscript, Debian Debian Linux, Suse Linux Enterprise High Performance Computing, Suse Linux Enterprise Server, Suse Linux Enterprise Server for Sap.

How do I fix CVE-2024-46956?

Upgrade to a fixed version.

Is CVE-2024-46956 being exploited?

There is no known exploitation of CVE-2024-46956 in the wild and no public exploit code.

Other vulnerabilities in Artifex Ghostscript

• CVE-2017-8291 Artifex Ghostscript Type Confusion Exploited High 7.8
• CVE-2021-3781 Command injection in ghostscript Critical 9.9
• CVE-2025-27831 Memory corruption in n/a Critical 9.8
• CVE-2025-27832 Memory corruption in n/a Critical 9.8
• CVE-2025-27836 Memory corruption in n/a Critical 9.8

All Artifex Ghostscript vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as ALPINE-CVE-2024-46956, BELL-CVE-2024-46956, CLSA-2025-1749826758, DEBIAN-CVE-2024-46956, GHSA-jrvf-vccr-mvp6, UBUNTU-CVE-2024-46956.