Critical Ghostscript flaw could let attackers hijack servers via uploaded PDFs
A heap buffer overflow in Ghostscript, tracked as CVE-2026-39919, can be triggered by a crafted PDF and may lead to remote code execution on servers that generate document previews.