What’s Vulnerable › Vulnerabilities

CVE-2024-29510

• Severity: medium (CVSS 6.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 28.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-07-03 · updated 2026-06-17
• Weakness: CWE-693

Description

Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.

Affected products

• Artifex Ghostscript: before 10.03.1 — fixed in 10.03.1

How to fix

Upgrade to a fixed version: Artifex Ghostscript 10.03.1. Check the vendor advisory for mitigations.

References

• https://bugs.ghostscript.com/show_bug.cgi?id=707662
• https://codeanlabs.com/blog/research/cve-2024-29510-ghostscript-format-string-exploitation/
• https://www.openwall.com/lists/oss-security/2024/07/03/7
• https://bugs.ghostscript.com/show_bug.cgi?id=707662
• https://codeanlabs.com/blog/research/cve-2024-29510-ghostscript-format-string-exploitation/
• https://www.openwall.com/lists/oss-security/2024/07/03/7
• https://www.vicarius.io/vsociety/posts/critical-vulnerability-in-ghostscript-cve-2024-29510

Get alerted when CVE-2024-29510 or the next vulnerability affects your stack