CVE-2025-46646

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-46646
In Artifex Ghostscript before 10.05.0, decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8 encoding. NOTE: this issue exists because of an incomplete fix for CVE-2024-46954.

4.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.4 / Impact : 2.7

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://bugs.ghostscript.com/show_bug.cgi?id=708311 Issue Tracking
https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f14ea81e6c3d2f51593f23cdf13c4679a18f1a3f Patch
Configurations

Configuration 1 (hide)

cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:*
History

23 Jun 2025, 18:36

Type Values Removed Values Added
References () https://bugs.ghostscript.com/show_bug.cgi?id=708311 - () https://bugs.ghostscript.com/show_bug.cgi?id=708311 - Issue Tracking
References () https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f14ea81e6c3d2f51593f23cdf13c4679a18f1a3f - () https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f14ea81e6c3d2f51593f23cdf13c4679a18f1a3f - Patch
First Time Artifex
Artifex ghostscript
CPE cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:*

29 Apr 2025, 13:52

Type Values Removed Values Added
Summary
  • (es) En Artifex Ghostscript anterior a la versión 10.05.0, decode_utf8 en base/gp_utf8.c gestiona incorrectamente la codificación UTF-8 excesivamente larga. NOTA: Este problema existe debido a una corrección incompleta de CVE-2024-46954.

26 Apr 2025, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-26 15:15

Updated : 2025-06-23 18:36

NVD link : CVE-2025-46646

Mitre link : CVE-2025-46646

CVE.ORG link : CVE-2025-46646

JSON object : View

Products Affected

artifex

  • ghostscript
CWE
CWE-24

Path Traversal: '../filedir'