CVE-2024-29510

Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.

CVSS v3.1

6.3 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

EPSS

27.97% chance of exploitation in the next 30 days, 98th percentile

Published

2024-07-03

Updated

2024-08-19

Proof-of-concept exploits (3)

• https://www.vicarius.io/vsociety/posts/critical-vulnerability-in-ghostscript-cve-2024-295…
• https://codeanlabs.com/blog/research/cve-2024-29510-ghostscript-format-string-exploitatio…
• swsmith2391/CVE-2024-295101★ · 2024-07-10

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/multi/fileformat/ghostscript_for…

References

• CVE Record
• NVD entry

Related

• CVE-2024-29504
• CVE-2024-2961
• CVE-2024-29499
• CVE-2024-29671
• CVE-2024-29461
• CVE-2024-29684