CVE-2024-29506

A flaw was found in Ghostscript. The PDFDEBUG flag controls the value of ctx->args.debug. In pdfi_apply_filter. This issue enables the execution of a memcpy into a stack buffer, without bounds checks. A filter name larger than 100 will overflow the str buffer, which may lead to an application crash or other unexpected behavior.

Mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.