CVE-2024-46956
Published: 10 November 2024
Summary
CVE-2024-46956 is a high-severity Out-of-bounds Read (CWE-125) vulnerability in Suse Linux Enterprise Server. Its CVSS base score is 7.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Client Execution (T1203); ranked in the top 46.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-42159
Vulnerability details
An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforall can lead to arbitrary code execution.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
CVE-2024-46956 enables arbitrary code execution via out-of-bounds data access in Ghostscript's filenameforall function when processing malicious PostScript or PDF files, facilitating Exploitation for Client Execution.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.