# CVE-2024-46954: ghostscript: An issue was discovered in decode_utf8 in base/gp_utf8.c in ArtifexGhostscript before 10.04.0

CVE-2024-46954 is fixed in 11 products on 1 platform, first by ghostscript 10.02.1~dfsg1-0ubuntu7.4, released October 29, 2024. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2024-46954
- Priority: High
- CVSS: 7.8 (Medium)
- EPSS: 0.0055
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Oct 29, 2024

## Description

An issue was discovered in decode_utf8 in base/gp_utf8.c in ArtifexGhostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../directory traversal.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | ghostscript Debian 13.5 (trixie) | 10.04.0~dfsg-1 | [DEBIAN-CVE-2024-46954](https://patchblox.com/security/data/fix/linux/debian-cve-2024-46954.md) | Nov 10, 2024 |
| Linux | ghostscript Debian 14 | 10.04.0~dfsg-1 | [DEBIAN-CVE-2024-46954](https://patchblox.com/security/data/fix/linux/debian-cve-2024-46954.md) | Nov 10, 2024 |
| Linux | ghostscript RHEL 10 | 10.02.1-15.el10_0 | [RHSA-2025:7499](https://patchblox.com/security/data/fix/linux/rhsa-2025-7499.md) | Nov 10, 2024 |
| Linux | ghostscript RHEL 8 | 0:9.27-16.el8_10 | [RHSA-2025:4362](https://patchblox.com/security/data/fix/linux/rhsa-2025-4362.md) | Apr 30, 2025 |
| Linux | ghostscript RHEL 9 | 0:9.54.0-18.el9_6 | [RHSA-2025:7422](https://patchblox.com/security/data/fix/linux/rhsa-2025-7422.md) | May 13, 2025 |
| Linux | ghostscript Ubuntu 24.04.5 LTS (noble) | 10.02.1~dfsg1-0ubuntu7.4 | [ghostscript 10.02.1~dfsg1-0ubuntu7.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-ghostscript-10.02.1-dfsg1-0ubuntu7.4.md) | Oct 29, 2024 |
| Linux | ghostscript Ubuntu 24.10 (oracular) | 10.03.1~dfsg1-0ubuntu2.1 | [ghostscript 10.03.1~dfsg1-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-ghostscript-10.03.1-dfsg1-0ubuntu2.1.md) | Oct 30, 2024 |
| Linux | ghostscript almalinux 8 | 9.27-16.el8_10 | [ALSA-2025:4362](https://patchblox.com/security/data/fix/linux/alsa-2025-4362.md) | Apr 30, 2025 |
| Linux | ghostscript almalinux 9 | 9.54.0-18.el9_6 | [ALSA-2025:7422](https://patchblox.com/security/data/fix/linux/alsa-2025-7422.md) | May 13, 2025 |
| Linux | ghostscript ol 10 | 0:10.02.1-16.el10_0 | [ELSA-2025-7499](https://patchblox.com/security/data/fix/linux/elsa-2025-7499.md) | Jun 30, 2025 |
| Linux | ghostscript ol 8 | 0:9.27-16.el8_10 | [ELSA-2025-4362](https://patchblox.com/security/data/fix/linux/elsa-2025-4362.md) | Apr 30, 2025 |
| Linux | ghostscript ol 9 | 0:9.54.0-18.el9_6 | [ELSA-2025-7422](https://patchblox.com/security/data/fix/linux/elsa-2025-7422.md) | May 21, 2025 |
| Linux | ghostscript rocky 8 | 0:9.27-16.el8_10 | [RLSA-2025:4362](https://patchblox.com/security/data/fix/linux/rlsa-2025-4362.md) | Jul 29, 2025 |
| Linux | ghostscript-doc RHEL 8 | 0:9.27-16.el8_10 | [RHSA-2025:4362](https://patchblox.com/security/data/fix/linux/rhsa-2025-4362.md) | Apr 30, 2025 |
| Linux | ghostscript-doc RHEL 9 | 0:9.54.0-18.el9_6 | [RHSA-2025:7422](https://patchblox.com/security/data/fix/linux/rhsa-2025-7422.md) | May 13, 2025 |
| Linux | ghostscript-doc almalinux 8 | 9.27-16.el8_10 | [ALSA-2025:4362](https://patchblox.com/security/data/fix/linux/alsa-2025-4362.md) | Apr 30, 2025 |
| Linux | ghostscript-doc almalinux 9 | 9.54.0-18.el9_6 | [ALSA-2025:7422](https://patchblox.com/security/data/fix/linux/alsa-2025-7422.md) | May 13, 2025 |
| Linux | ghostscript-doc ol 10 | 0:10.02.1-16.el10_0 | [ELSA-2025-7499](https://patchblox.com/security/data/fix/linux/elsa-2025-7499.md) | Jun 30, 2025 |
| Linux | ghostscript-doc ol 8 | 0:9.27-16.el8_10 | [ELSA-2025-4362](https://patchblox.com/security/data/fix/linux/elsa-2025-4362.md) | Apr 30, 2025 |
| Linux | ghostscript-doc ol 9 | 0:9.54.0-18.el9_6 | [ELSA-2025-7422](https://patchblox.com/security/data/fix/linux/elsa-2025-7422.md) | May 21, 2025 |
| Linux | ghostscript-tools-dvipdf RHEL 8 | 0:9.27-16.el8_10 | [RHSA-2025:4362](https://patchblox.com/security/data/fix/linux/rhsa-2025-4362.md) | Apr 30, 2025 |
| Linux | ghostscript-tools-dvipdf RHEL 9 | 0:9.54.0-18.el9_6 | [RHSA-2025:7422](https://patchblox.com/security/data/fix/linux/rhsa-2025-7422.md) | May 13, 2025 |
| Linux | ghostscript-tools-dvipdf almalinux 8 | 9.27-16.el8_10 | [ALSA-2025:4362](https://patchblox.com/security/data/fix/linux/alsa-2025-4362.md) | Apr 30, 2025 |
| Linux | ghostscript-tools-dvipdf almalinux 9 | 9.54.0-18.el9_6 | [ALSA-2025:7422](https://patchblox.com/security/data/fix/linux/alsa-2025-7422.md) | May 13, 2025 |
| Linux | ghostscript-tools-dvipdf ol 10 | 0:10.02.1-16.el10_0 | [ELSA-2025-7499](https://patchblox.com/security/data/fix/linux/elsa-2025-7499.md) | Jun 30, 2025 |
| Linux | ghostscript-tools-dvipdf ol 8 | 0:9.27-16.el8_10 | [ELSA-2025-4362](https://patchblox.com/security/data/fix/linux/elsa-2025-4362.md) | Apr 30, 2025 |
| Linux | ghostscript-tools-dvipdf ol 9 | 0:9.54.0-18.el9_6 | [ELSA-2025-7422](https://patchblox.com/security/data/fix/linux/elsa-2025-7422.md) | May 21, 2025 |
| Linux | ghostscript-tools-fonts RHEL 8 | 0:9.27-16.el8_10 | [RHSA-2025:4362](https://patchblox.com/security/data/fix/linux/rhsa-2025-4362.md) | Apr 30, 2025 |
| Linux | ghostscript-tools-fonts RHEL 9 | 0:9.54.0-18.el9_6 | [RHSA-2025:7422](https://patchblox.com/security/data/fix/linux/rhsa-2025-7422.md) | May 13, 2025 |
| Linux | ghostscript-tools-fonts almalinux 8 | 9.27-16.el8_10 | [ALSA-2025:4362](https://patchblox.com/security/data/fix/linux/alsa-2025-4362.md) | Apr 30, 2025 |
| Linux | ghostscript-tools-fonts almalinux 9 | 9.54.0-18.el9_6 | [ALSA-2025:7422](https://patchblox.com/security/data/fix/linux/alsa-2025-7422.md) | May 13, 2025 |
| Linux | ghostscript-tools-fonts ol 10 | 0:10.02.1-16.el10_0 | [ELSA-2025-7499](https://patchblox.com/security/data/fix/linux/elsa-2025-7499.md) | Jun 30, 2025 |
| Linux | ghostscript-tools-fonts ol 8 | 0:9.27-16.el8_10 | [ELSA-2025-4362](https://patchblox.com/security/data/fix/linux/elsa-2025-4362.md) | Apr 30, 2025 |
| Linux | ghostscript-tools-fonts ol 9 | 0:9.54.0-18.el9_6 | [ELSA-2025-7422](https://patchblox.com/security/data/fix/linux/elsa-2025-7422.md) | May 21, 2025 |
| Linux | ghostscript-tools-printing RHEL 8 | 0:9.27-16.el8_10 | [RHSA-2025:4362](https://patchblox.com/security/data/fix/linux/rhsa-2025-4362.md) | Apr 30, 2025 |
| Linux | ghostscript-tools-printing RHEL 9 | 0:9.54.0-18.el9_6 | [RHSA-2025:7422](https://patchblox.com/security/data/fix/linux/rhsa-2025-7422.md) | May 13, 2025 |
| Linux | ghostscript-tools-printing almalinux 8 | 9.27-16.el8_10 | [ALSA-2025:4362](https://patchblox.com/security/data/fix/linux/alsa-2025-4362.md) | Apr 30, 2025 |
| Linux | ghostscript-tools-printing almalinux 9 | 9.54.0-18.el9_6 | [ALSA-2025:7422](https://patchblox.com/security/data/fix/linux/alsa-2025-7422.md) | May 13, 2025 |
| Linux | ghostscript-tools-printing ol 10 | 0:10.02.1-16.el10_0 | [ELSA-2025-7499](https://patchblox.com/security/data/fix/linux/elsa-2025-7499.md) | Jun 30, 2025 |
| Linux | ghostscript-tools-printing ol 8 | 0:9.27-16.el8_10 | [ELSA-2025-4362](https://patchblox.com/security/data/fix/linux/elsa-2025-4362.md) | Apr 30, 2025 |
| Linux | ghostscript-tools-printing ol 9 | 0:9.54.0-18.el9_6 | [ELSA-2025-7422](https://patchblox.com/security/data/fix/linux/elsa-2025-7422.md) | May 21, 2025 |
| Linux | ghostscript-x11 RHEL 8 | 0:9.27-16.el8_10 | [RHSA-2025:4362](https://patchblox.com/security/data/fix/linux/rhsa-2025-4362.md) | Apr 30, 2025 |
| Linux | ghostscript-x11 RHEL 9 | 0:9.54.0-18.el9_6 | [RHSA-2025:7422](https://patchblox.com/security/data/fix/linux/rhsa-2025-7422.md) | May 13, 2025 |
| Linux | ghostscript-x11 almalinux 8 | 9.27-16.el8_10 | [ALSA-2025:4362](https://patchblox.com/security/data/fix/linux/alsa-2025-4362.md) | Apr 30, 2025 |
| Linux | ghostscript-x11 almalinux 9 | 9.54.0-18.el9_6 | [ALSA-2025:7422](https://patchblox.com/security/data/fix/linux/alsa-2025-7422.md) | May 13, 2025 |
| Linux | ghostscript-x11 ol 8 | 0:9.27-16.el8_10 | [ELSA-2025-4362](https://patchblox.com/security/data/fix/linux/elsa-2025-4362.md) | Apr 30, 2025 |
| Linux | ghostscript-x11 ol 9 | 0:9.54.0-18.el9_6 | [ELSA-2025-7422](https://patchblox.com/security/data/fix/linux/elsa-2025-7422.md) | May 21, 2025 |
| Linux | libgs RHEL 8 | 0:9.27-16.el8_10 | [RHSA-2025:4362](https://patchblox.com/security/data/fix/linux/rhsa-2025-4362.md) | Apr 30, 2025 |
| Linux | libgs RHEL 9 | 0:9.54.0-18.el9_6 | [RHSA-2025:7422](https://patchblox.com/security/data/fix/linux/rhsa-2025-7422.md) | May 13, 2025 |
| Linux | libgs almalinux 8 | 9.27-16.el8_10 | [ALSA-2025:4362](https://patchblox.com/security/data/fix/linux/alsa-2025-4362.md) | Apr 30, 2025 |
| Linux | libgs almalinux 9 | 9.54.0-18.el9_6 | [ALSA-2025:7422](https://patchblox.com/security/data/fix/linux/alsa-2025-7422.md) | May 13, 2025 |
| Linux | libgs ol 10 | 0:10.02.1-16.el10_0 | [ELSA-2025-7499](https://patchblox.com/security/data/fix/linux/elsa-2025-7499.md) | Jun 30, 2025 |
| Linux | libgs ol 8 | 0:9.27-16.el8_10 | [ELSA-2025-4362](https://patchblox.com/security/data/fix/linux/elsa-2025-4362.md) | Apr 30, 2025 |
| Linux | libgs ol 9 | 0:9.54.0-18.el9_6 | [ELSA-2025-7422](https://patchblox.com/security/data/fix/linux/elsa-2025-7422.md) | May 21, 2025 |
| Linux | libgs-common Ubuntu 24.04.5 LTS (noble) | 10.02.1~dfsg1-0ubuntu7.4 | [libgs-common 10.02.1~dfsg1-0ubuntu7.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libgs-common-10.02.1-dfsg1-0ubuntu7.4.md) | Oct 29, 2024 |
| Linux | libgs-common Ubuntu 24.10 (oracular) | 10.03.1~dfsg1-0ubuntu2.1 | [libgs-common 10.03.1~dfsg1-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libgs-common-10.03.1-dfsg1-0ubuntu2.1.md) | Oct 30, 2024 |
| Linux | libgs-devel RHEL 8 | 0:9.27-16.el8_10 | [RHSA-2025:4362](https://patchblox.com/security/data/fix/linux/rhsa-2025-4362.md) | Apr 30, 2025 |
| Linux | libgs-devel RHEL 9 | 0:9.54.0-18.el9_6 | [RHSA-2025:7422](https://patchblox.com/security/data/fix/linux/rhsa-2025-7422.md) | May 13, 2025 |
| Linux | libgs-devel almalinux 8 | 9.27-16.el8_10 | [ALSA-2025:4362](https://patchblox.com/security/data/fix/linux/alsa-2025-4362.md) | Apr 30, 2025 |
| Linux | libgs-devel almalinux 9 | 9.54.0-18.el9_6 | [ALSA-2025:7422](https://patchblox.com/security/data/fix/linux/alsa-2025-7422.md) | May 13, 2025 |
| Linux | libgs-devel ol 10 | 0:10.02.1-16.el10_0 | [ELSA-2025-7499](https://patchblox.com/security/data/fix/linux/elsa-2025-7499.md) | Jun 30, 2025 |
| Linux | libgs-devel ol 8 | 0:9.27-16.el8_10 | [ELSA-2025-4362](https://patchblox.com/security/data/fix/linux/elsa-2025-4362.md) | Apr 30, 2025 |
| Linux | libgs-devel ol 9 | 0:9.54.0-18.el9_6 | [ELSA-2025-7422](https://patchblox.com/security/data/fix/linux/elsa-2025-7422.md) | May 21, 2025 |
| Linux | libgs10 Ubuntu 24.04.5 LTS (noble) | 10.02.1~dfsg1-0ubuntu7.4 | [libgs10 10.02.1~dfsg1-0ubuntu7.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libgs10-10.02.1-dfsg1-0ubuntu7.4.md) | Oct 29, 2024 |
| Linux | libgs10 Ubuntu 24.10 (oracular) | 10.03.1~dfsg1-0ubuntu2.1 | [libgs10 10.03.1~dfsg1-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libgs10-10.03.1-dfsg1-0ubuntu2.1.md) | Oct 30, 2024 |
| Linux | libgs10-common Ubuntu 24.04.5 LTS (noble) | 10.02.1~dfsg1-0ubuntu7.4 | [libgs10-common 10.02.1~dfsg1-0ubuntu7.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libgs10-common-10.02.1-dfsg1-0ubuntu7.4.md) | Oct 29, 2024 |
| Linux | libgs10-common Ubuntu 24.10 (oracular) | 10.03.1~dfsg1-0ubuntu2.1 | [libgs10-common 10.03.1~dfsg1-0ubuntu2.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libgs10-common-10.03.1-dfsg1-0ubuntu2.1.md) | Oct 30, 2024 |

---

Data as of 2026-11-09T07:25:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.