yocto ▾
›
kirkstone ▾
›
vulnerability
›
CVE-2024-29506
Component Overview
Vulnerability Overview
Name
CVE-2024-29506
Source
NVD (
link
)
Debian (
link
)
Description
Artifex Ghostscript before 10.03.0 has a stack-based buffer overflow in the pdfi_apply_filter() function via a long PDF filter name.
CWEs
CWE-787
CWE-120
Published Date
Jul 3, 2024
Updated Date
Jun 17, 2026
Workaround
-
Advisories
https://bugs.ghostscript.com/show_bug.cgi?id=707510
Issue Tracking
https://git.ghostscript.com/?p=ghostpdl.git%3Bh=77dc7f699beba606937b7ea23b50cf5974fa64b1
Broken Link
https://www.openwall.com/lists/oss-security/2024/07/03/7
Mailing List
https://bugs.ghostscript.com/show_bug.cgi?id=707510
Issue Tracking
https://git.ghostscript.com/?p=ghostpdl.git%3Bh=77dc7f699beba606937b7ea23b50cf5974fa64b1
Broken Link
https://www.openwall.com/lists/oss-security/2024/07/03/7
Mailing List
Analysis
#
Affected Component
Analysis
ghostscript
Patched
Vulnerability Ratings
#
8.8
CVSSv31
5.4
CVSSv31
NaN
other
Others affected components
#
Name
Project
Project Version
Version
Status
ghostscript
buildroot
2025.02.x
10.07.0
Not Affected
ghostscript
buildroot
master
10.07.0
Not Affected
ghostscript
yocto
master
10.07.1
Not Affected
ghostscript
yocto
scarthgap
10.05.1
Not Affected
Resolved with patches
#
ghostscript (yocto:kirkstone)
#
Title
Author
Resolve
1
Bug 707510 - don't allow PDF files with bad Filters to
Ken Sharp <Ken.Sharp@artifex.com>
CVE-2024-29506