SZB-5457de850d
Ghostscript TrueType font heap buffer overflow disclosed as EUVD-2026-113444
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Ghostscript
- Product
- Ghostscript
- First seen
Summary
The EUVD entry, relayed in a Mastodon post, says a font-rendering accounting error in Ghostscript can bypass buffer size checks and cause a heap-based buffer overflow. The post assigns a CVSS v3.1 score of 5.8/10 and says a remote attacker could exploit it by enticing a victim to open a crafted file.
If you use Ghostscript
Update Ghostscript to a patched version once your distribution or upstream releases it
Avoid opening untrusted PDF or PostScript files until patched
Update Ghostscript to a patched version when available
Avoid processing PDF or PostScript files from untrusted sources
What the sources say 2
· Mastodon: “A flaw was found in Ghostscript.” Source
· Mastodon: “A flaw was found in Ghostscript.” Source