SecurityBleepingComputerabout 2 hours ago
Ghostscript Flaw Lets Hackers Hijack Servers
3 min read
Researchers at Defiant discovered a critical heap buffer overflow vulnerability, CVE-2026-39919, in Ghostscript on August 23. The flaw allows remote code execution via crafted PDFs containing JPEG 2000 images. Maintainer Artifex rolled out a fix on September 8 in version 10.08.0, though Wordfence reports no in-the-wild exploitation yet.
Level
Hype check
Tap to vote and see what everyone thinks.