CVE-2024-29510

Description

Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://bugs.ghostscript.com/show_bug.cgi?id=707662 ↗
• https://www.openwall.com/lists/oss-security/2024/07/03/7 ↗
• https://codeanlabs.com/blog/research/cve-2024-29510-ghostscript-format-string-exploitation/ ↗
• https://www.vicarius.io/vsociety/posts/critical-vulnerability-in-ghostscript-cve-2024-29510 ↗