Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Ghostscript heap buffer overflow RCE (CVE-2026-39919)

Vulnerability
First reported
Last updated
Happening score
H score 29
1 unique sources, 1 articles

Summary

Hide ▲

A critical heap buffer overflow in Ghostscript (CVE-2026-39919) can enable remote code execution through specially crafted PDF files. The flaw affects Ghostscript 9.21 through 10.07.1 and can be reached in PDF-rendering workflows, including some WordPress thumbnail paths. Artifex fixed the issue in 10.08.0, and Wordfence said it had not seen in-the-wild exploitation.

Related Happenings

Ghostscript PDF upload hardening guidance for WordPress administrators

Defensive Guidance
H score26 First: 14.10.2026 00:33 Last: 14.10.2026 00:33 Sources 1

How related: If unable to upgrade to a fixed Ghostscript release, it is recommended to block PDF uploads to the server or disable PDF rendering in ImageMagick.

About this happening: Administrators handling Ghostscript-backed PDF workflows should harden upload and rendering paths because CVE-2026-39919 can enable unauthenticated remote code execution...

Open Happening

Timeline

  1. 14.10.2026 00:33 1 articles · 2h ago

    Wordfence discovers Ghostscript heap buffer overflow

    Technical Analysis Update

    Defiant's Wordfence researchers discovered CVE-2026-39919 on August 23 using the Argus AI-powered system, identifying a critical heap buffer overflow in the Ghostscript interpreter and rendering engine that could be triggered by specially crafted PDF files.

    Show sources
    Open in new tab
  2. 14.10.2026 00:33 1 articles · 2h ago

    Artifex ships Ghostscript 10.08.0 to fix CVE-2026-39919

    Mitigation Patch Update

    Artifex released Ghostscript 10.08.0 on September 8 to fix CVE-2026-39919 and later backported the repair to older versions, closing the vulnerable decoding code in affected Ghostscript deployments.

    Show sources
    Open in new tab
  3. 14.10.2026 00:33 2 articles · 2h ago

    Wordfence publishes Ghostscript CVE-2026-39919 details

    Initial Disclosure

    Wordfence publicly described CVE-2026-39919 on October 13, saying the Ghostscript 9.21 through 10.07.1 flaw can enable unauthenticated remote code execution through specially crafted PDF files, while noting that it had not seen any in-the-wild exploitation.

    Show sources
    Open in new tab