CVE-2024-29510

Name of the Vulnerable Software and Affected Versions Ghostscript versions prior to 10.03.1

Description A format string injection flaw exists in the uniprint device of Ghostscript, a PostScript and PDF interpreter. The issue occurs because the device allows users to pass string fragments as options—specifically upWriteComponentCommands and upYMoveCommand—which are then processed as format strings by the gp fprintf() and gs snprintf() functions without proper restriction. This can lead to memory corruption, data leakage from the stack, and a bypass of the SAFER sandbox, which is a security mode designed to prevent PostScript code from executing dangerous commands or accessing arbitrary files. Successful exploitation may allow an unauthenticated remote attacker to execute arbitrary code in the context of the Ghostscript process, potentially leading to full system compromise if the software is running with elevated privileges.

Recommendations Upgrade to Ghostscript version 10.03.1 or later. As a temporary mitigation, disable Ghostscript delegates and restrict the processing of PDF and PS files.