A vulnerability in Ghostscript as shipped with Red Hat Enterprise Linux 8 allows bypassing of -dSAFER restrictions due to insufficient protection of privileged .forceput operations in the .charkeys procedure. This flaw was introduced when the fix for CVE-2019-14869 was omitted during a rebase from version 9.25 to 9.27. Exploiting this vulnerability may enable an attacker to access files outside permitted paths or execute commands with the permissions of the Ghostscript process.