CVE-2026-110133

Name of the Vulnerable Software and Affected Versions Ghostscript versions prior to 10.08.0-4.1

Description An accounting error during font rendering when processing a specially crafted TrueType font or document embedding one can bypass buffer size checks. This leads to a heap-based buffer overflow, which occurs when a program writes more data to a heap memory block than it can hold. A remote attacker could trigger this by enticing a victim or automated service to open malicious content, potentially resulting in a Denial of Service (DoS) crash or arbitrary code execution.

Recommendations Update to version 10.08.0-4.1.