CVE-2024-46951

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript versions prior to 10.04.0

Description An issue was discovered in psi/zcolor.c, related to an unchecked Implementation pointer in Pattern color space, which could lead to arbitrary code execution. The vulnerability is associated with access to an uninitialized pointer, allowing an attacker to execute arbitrary code.

Recommendations For Artifex Ghostscript versions prior to 10.04.0, update to version 10.04.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the psi/zcolor.c component until a patch is available.