CVE-2026-110133 is a heap-based buffer overflow in Ghostscript triggered by a bookkeeping error during TrueType font rendering that lets a malicious font slip past buffer size checks. An attacker who gets a victim or an automated service to open a crafted font, or a document that embeds one, could crash the process or potentially run arbitrary code. Because Ghostscript sits underneath many PDF and PostScript handling tools, the bug carries broad downstream risk.
// source: nvd.nist.gov ↗