A flaw was found in ghostscript. This vulnerability allows a remote attacker to trigger an application crash leading to a Denial of Service (DoS) or potentially execute arbitrary code by tricking a user or service into processing a specially crafted file. The issue stems from a stack-based buffer overflow in the pdfwrite component during Type 1 font processing.
Last checked: 2026-09-30 17:15 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-30 14:24 UTC)
Fix evidence last checked: 2026-10-01 08:32 UTC