{"id":"CVE-2026-110133","published":"2026-10-30T01:16:43.730","lastModified":"2026-10-30T01:16:43.880","description":"A flaw was found in Ghostscript. When processing a specially crafted TrueType font or document embedding one, an accounting error during font rendering can bypass buffer size checks, triggering a heap-based buffer overflow. A remote attacker could exploit this by enticing a victim or automated service to open the malicious content, potentially resulting in a Denial of Service (DoS) crash or arbitrary code execution.","cvssScore":5.8,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-110133","tags":[]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2461973","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}