Critical Ghostscript heap overflow enables RCE via malicious PDFs

A critical heap buffer overflow (CVE-2026-39919) in Ghostscript allows remote code execution via crafted PDFs, affecting servers that process untrusted uploads. Exploitation is likely given Ghostscript's widespread use in document processing pipelines. Patches or mitigations are not yet detailed, leaving many systems exposed.