EUVD-2026-120559

Ghostscript before 10.08.0 contains a -dSAFER bypass vulnerability in the .putgstringcopy procedure in gsfonts.ps, which calls the privileged .forceput operator without checking operand types. Attackers can supply crafted PostScript or PDF documents that trigger a type error, recover .forceput vi...

CVE-2026-125396

Ghostscript versions before 10.08.0 are vulnerable to a -dSAFER bypass in the .putgstringcopy procedure within gs_fonts.ps. The root cause is the call to the privileged .forceput operator without proper operand type checking. An attacker can provide crafted PostScript or PDF documents to trigger ...