CVE-2024-46956

Name of the Vulnerable Software and Affected Versions: Artifex Ghostscript versions prior to 10.04.0

Description: An issue in the psi/zfile.c component of Artifex Ghostscript is related to out-of-bounds data access in the filenameforall function, which can lead to arbitrary code execution. This issue allows an attacker to potentially execute arbitrary code.

Recommendations: For Artifex Ghostscript versions prior to 10.04.0, update to version 10.04.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the filenameforall function in the psi/zfile.c component until a patch is available.