Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure (observable in a constructed BaseFont name) in the function pdfbasefont_alloc.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-29508.json"
[ { "events": [ { "introduced": "0" }, { "fixed": "10.03.0" } ] }, { "events": [ { "introduced": "0" }, { "fixed": "10.03.0" } ] } ]