Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2024-29510

51
FAUCET Score

CVE-2024-29510 is a memory corruption vulnerability in Artifex Ghostscript versions prior to 10.03.1, allowing for a SAFER sandbox bypass through format string injection with a uniprint device. This vulnerability carries a CVSS score of 6.3 (Medium) due to its local attack vector and low attack complexity, potentially leading to high confidentiality impact. Although not in the KEV catalog, exploit intelligence indicates active exploitation, with a Metasploit module available and significant community discussion and media coverage, including reports of it being exploited in the wild.

Impacted Technologies

VendorProductVersion(s)CPE
< 10.03.1CPE matchmatch criteria
cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

6.3MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
Exploitability Score
1.8
Impact Score
4.0
CvssVersion
3.1

Exploit Intelligence

EPSS Score
27.97%
Probability of exploitation in next 30 days
EPSS Percentile
97.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
Metasploit: Ghostscript Command Execution via Format String · Mar 14, 2024
This CVE's current EPSS score of 0.2797 is in the 100th percentile among its peer group of 5,760 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (5)

nodejspatch availablevia llm_extracted
View patch
pjsippatch availablevia llm_extracted
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: ghostscript-0:9.54.0-17.el9_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: ghostscript-0:9.54.0-12.el9_2.2
View patch
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: gimp:flatpak/ghostscript

Vendor Advisories (3)

nodejsllm-nodejs-302528ae26f0d946CRITICAL

HP ThinPro 8.1 SP4 Security Updates

Oct 29, 2024
pjsipllm-pjsip-7ba3ec379210ac70CRITICAL

HP ThinPro 8.1 SP4 Security Updates

Oct 29, 2024
redhatCVE-2024-29510Moderate

ghostscript: format string injection leads to shell command execution (SAFER bypass)

May 16, 2024

References

vicarius.io / vsociety/posts/critical-vulnerability-in-ghostscript-cve-2024-29510
ExploitThird Party Advisory
bugs.ghostscript.com / show_bug.cgi
Issue Tracking
codeanlabs.com / blog/research/cve-2024-29510-ghostscript-format-string-exploitation
ExploitThird Party Advisory
openwall.com / lists/oss-security/2024/07/03/7
Mailing List