Ghostscript flaw lets hackers hijack servers via PDF uploads

A critical heap buffer overflow vulnerability in Ghostscript (CVE-2026-39919) allows remote code execution via maliciously crafted PDF files, particularly when processed by systems like WordPress that use Ghostscript for thumbnail generation. The flaw affects Ghostscript versions 9.21 through 10.07.1 and can be exploited if an attacker uploads a PDF that triggers the vulnerability during rendering. Researchers at Wordfence developed proof-of-concept exploits and demonstrated successful remote code execution in lab environments, though reliability depends on system configuration. Artifex released a patch in version 10.08.0, and administrators are advised to update or disable PDF rendering to mitigate risk.

AI-extracted · verify before operational use