CVE-2024-29508

2024-07-0300:00:00

ubuntu.com

artifex ghostscript

heap-based pointer

disclosure

basefont name

pdf

unix

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

21.8%

JSON

Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure
(observable in a constructed BaseFont name) in the function
pdf_base_font_alloc.

Bugs

<https://bugs.ghostscript.com/show_bug.cgi?id=707510>

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchghostscript< anyUNKNOWN
ubuntu20.04noarchghostscript< 9.50~dfsg-5ubuntu4.13UNKNOWN
ubuntu22.04noarchghostscript< 9.55.0~dfsg1-0ubuntu5.9UNKNOWN
ubuntu24.04noarchghostscript< 10.02.1~dfsg1-0ubuntu7.3UNKNOWN
ubuntu16.04noarchghostscript< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	ghostscript	< any	UNKNOWN
ubuntu	20.04	noarch	ghostscript	< 9.50~dfsg-5ubuntu4.13	UNKNOWN
ubuntu	22.04	noarch	ghostscript	< 9.55.0~dfsg1-0ubuntu5.9	UNKNOWN
ubuntu	24.04	noarch	ghostscript	< 10.02.1~dfsg1-0ubuntu7.3	UNKNOWN
ubuntu	16.04	noarch	ghostscript	< any	UNKNOWN