Multiple security vulnerabilities have been identified in Ghostscript across multiple supported releases, affecting its document and font processing components. The issues can allow a crash or, in some cases, sandbox bypass and arbitrary code execution when specially crafted files are processed. Overall risk is elevated for environments that accept or automatically process untrusted documents. The affected components are part of the document and font processing pipeline, increasing the potential impact of malicious input.
CVE-2026-101258: Ghostscript incorrectly handled memory under certain circumstances while processing PostScript documents. If a user or automated system is tricked into processing a specially crafted document, an attacker could possibly use this issue to bypass the sandbox and execute arbitrary code.[/subscribe_to_unlock_form]
Multiple security vulnerabilities have been identified in Ghostscript across multiple supported releases, affecting its document and font processing components. The issues can allow a crash or, in some cases, sandbox bypass and arbitrary code execution when specially crafted files are processed. Overall risk is elevated for environments that accept or automatically process untrusted documents. The affected components are part of the document and font processing pipeline, increasing the potential impact of malicious input.
CVE-2026-101258: Ghostscript incorrectly handled memory under certain circumstances while processing PostScript documents. If a user or automated system is tricked into processing a specially crafted document, an attacker could possibly use this issue to bypass the sandbox and execute arbitrary code.[emaillocker id="1283"]
CVE-2026-103226: Ghostscript incorrectly handled memory when converting certain fonts. If a user or automated system is tricked into processing a specially crafted file, an attacker could possibly use this issue to cause a crash or possibly execute arbitrary code.
These vulnerabilities collectively present a significant risk to systems that process untrusted document content. The most exposed environments are those where documents are opened automatically or by users in untrusted workflows. Organizations should treat untrusted document processing as a high-priority exposure.
The following reports contain further technical details:
[/emaillocker]