CVE-2024-46953

What it actually does

Integer overflow during filename format string parsing in gsdevice.c causes path truncation that enables path traversal writes and potential arbitrary code execution via crafted output filenames.

Why it matters to the business

Systems that process untrusted PostScript, PDF, or EPS files with Ghostscript can suffer unauthorized file writes or remote code execution, risking data theft, malware deployment, or service disruption.

How an attack unfolds

An attacker supplies a malicious document or command-line invocation containing a specially crafted filename format string; the integer overflow truncates the resulting path, allowing traversal sequences that overwrite files or place executable content in locations Ghostscript will later process or execute.

How to fix it

Upgrade artifexsoftware/ghostpdl to the commit df8f4966577fff70320be2eb33cb55eb15d05d52 or later releases that contain the fix; rebuild any downstream packages that embed Ghostscript and validate the updated binary.

How to confirm the fix worked

Confirm the installed Ghostscript reports a version containing commit df8f4966577fff70320be2eb33cb55eb15d05d52; run regression tests with malicious filename format strings that previously triggered overflow to verify truncation no longer occurs.

Typical attack path

1. Identify a Ghostscript invocation that accepts attacker-controlled output filename format strings
2. Craft an input that triggers the integer overflow in filename parsing
3. Use resulting truncation to inject path traversal sequences
4. Write or overwrite files to achieve code execution or persistence
5. Trigger execution of the planted payload through normal document processing

How to detect it

Review process command lines and logs for Ghostscript invocations containing unusual filename format strings with %d, %s, or path traversal sequences; inspect file system changes near output paths for unexpected writes or executables created after document processing.

What your security team should do

• Immediately update all Ghostscript installations to the fixed commit
• Inventory and patch any products or containers that bundle Ghostscript
• Restrict Ghostscript use on untrusted input until patched
• Monitor for new releases and apply updates within 48 hours