CVE-2024-46951: 
Ghostscript vulnerability analysis and mitigation

A vulnerability was discovered in Artifex Ghostscript's psi/zcolor.c component before version 10.04.0. The vulnerability (CVE-2024-46951) involves an unchecked Implementation pointer in Pattern color space that could lead to arbitrary code execution (NVD, MITRE).

The vulnerability exists in the Pattern color space implementation within the psi/zcolor.c file. The issue stems from an unchecked Implementation pointer that could be exploited. The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (High) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating local access, low attack complexity, no privileges required, and user interaction required (NVD).

If exploited, this vulnerability could allow arbitrary code execution on affected systems. The high CVSS score reflects the severe potential impact on confidentiality, integrity, and availability of the affected systems (NVD).

The vulnerability has been fixed in Ghostscript version 10.04.0. Users are advised to upgrade to this version or later. The fix includes adding proper type checking for the Pattern Implementation pointer (Ghostscript News, Ghostscript Patch).