writeups.xyz / CVE-2024-29511 – Abusing Ghostscript’s OCR device

Submitter : c2a

Date: 9 July 2024

Bounty : undisclosed

Vulnerabilities :

• Arbitrary File Read
• Arbitrary File Write
• Security Code Review

Programs :

• Ghostscript

Authors :

• Thomas Rinsma (@Thomasrinsma)

Link :
https://codeanlabs.com/blog/research/cve-2024-29511-abusing-ghostscripts-ocr-device/