CVE-2024-33871

An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver library, exploitable via a crafted PostScript document. This occurs because the Driver parameter for opvp (and oprp) devices can have an arbitrary name for a dynamic library; this library is then loaded.

• CWE-94

• https://bugs.ghostscript.com/show_bug.cgi?id=707754Issue Tracking
• https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=7145885041bb52cc23964f0aa2aec1b1c82b5908Patch
• https://www.openwall.com/lists/oss-security/2024/06/28/2Mailing List
• https://bugs.ghostscript.com/show_bug.cgi?id=707754Issue Tracking
• https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=7145885041bb52cc23964f0aa2aec1b1c82b5908Patch
• https://www.openwall.com/lists/oss-security/2024/06/28/2Mailing List

Published

Jul 3, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-33866An issue was discovered in linqi before 1.4.0.1 on Windows. …5.5
• CVE-2024-33867An issue was discovered in linqi before 1.4.0.1 on Windows. …4.8
• CVE-2024-33868An issue was discovered in linqi before 1.4.0.1 on Windows. …9.8
• CVE-2024-33869An issue was discovered in Artifex Ghostscript before 10.03.…5.3
• CVE-2024-3387A weak (low bit strength) device certificate in Palo Alto Ne…5.9
• CVE-2024-33870An issue was discovered in Artifex Ghostscript before 10.03.…6.3
• CVE-2024-33872Keyfactor Command 10.5.x before 10.5.1 and 11.5.x before 11.…9.8
• CVE-2024-33873HDF5 Library through 1.14.3 has a heap-based buffer overflow…8.8
• CVE-2024-33874HDF5 Library through 1.14.3 has a heap buffer overflow in H5…9.8
• CVE-2024-33875HDF5 Library through 1.14.3 has a heap-based buffer overflow…5.7
• CVE-2024-33876HDF5 Library through 1.14.3 has a heap buffer overflow in H5…5.7
• CVE-2024-33877HDF5 Library through 1.14.3 has a heap-based buffer overflow…8.8