CVE-2026-101258: Out-of-bounds Write in Red Hat Red Hat Enterprise Linux 10

This vulnerability in Ghostscript arises when rendering a malicious PostScript or EPS document. The flaw enables bypassing the -dSAFER sandbox restriction, allowing arbitrary shell command execution within the Ghostscript process context. The issue combines memory corruption during document parsing with runtime disabling of internal path access controls. Attackers can deliver the malicious document directly or via workflows that delegate rendering to Ghostscript, such as EPS import or print conversion. Successful exploitation impacts confidentiality, integrity, and availability of data accessible to the process running Ghostscript.

Exploitation of this vulnerability can lead to arbitrary shell command execution with the privileges of the Ghostscript process. This compromises confidentiality, integrity, and availability of data accessible to that process, potentially allowing unauthorized data access, modification, or denial of service.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-101258 for current remediation guidance.