CVE-2026-110133

NameCVE-2026-110133
DescriptionA flaw was found in Ghostscript. When processing a specially crafted TrueType font or document embedding one, an accounting error during font rendering can bypass buffer size checks, triggering a heap-based buffer overflow. A remote attacker could exploit this by enticing a victim or automated service to open the malicious content, potentially resulting in a Denial of Service (DoS) crash or arbitrary code execution.
SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
ghostscript (PTS)bookworm, bookworm (security)10.0.0~dfsg-11+deb12u8vulnerable
trixie10.05.1~dfsg-1+deb13u1vulnerable
trixie (security)10.05.1~dfsg-1+deb13u3vulnerable
forky, sid10.08.0~dfsg-2vulnerable

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
ghostscriptsource(unstable)(unfixed)

Notes

https://bugzilla.redhat.com/show_bug.cgi?id=2461973

Search for package or bug name: Reporting problems