CVE-2024-46955 is an out-of-bounds read vulnerability in Artifex Ghostscript versions prior to 10.04.0, specifically affecting the handling of Indexed color spaces, and impacts products from Artifex, Debian, and SUSE. With a CVSS score of 5.5 (Medium), this vulnerability requires local access and user interaction to trigger, leading to a potential denial of service. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 10.04.0CPE matchmatch criteria | cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:* | ||
12.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:* | ||
12.0CPE matchmatch criteria | cpe:2.3:o:suse:linux_enterprise_high_performance_computing:12.0:sp5:*:*:-:*:*:* | ||
12CPE matchmatch criteria | cpe:2.3:o:suse:linux_enterprise_server:12:sp5:*:*:-:*:*:* | ||
12CPE matchmatch criteria | cpe:2.3:o:suse:linux_enterprise_server:12:sp5:*:*:ltss:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
HP ThinPro 8.1 SP6 Security Updates
Mar 3, 2025HP ThinPro 8.1 SP6 Security Updates
Mar 3, 2025HP ThinPro 8.1 SP6 Security Updates
Mar 3, 2025HP ThinPro 8.1 SP6 Security Updates
Mar 3, 2025ghostscript: Out-of-Bounds Read in Ghostscript Indexed Color Space
Nov 10, 2024