Ghostscript flaw lets hackers hijack servers via PDF uploads

A critical heap buffer overflow vulnerability, CVE-2026-39919, in Ghostscript may allow remote code execution through specially crafted PDF files. The source says that no exploitation in the wild has been observed yet.