---
id: CVE-2026-112177
title: 'Ghostscript: reintroduction of .charkeys -dsafer bypass in rhel 8'
summary: >-
  A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8.
  The correction for CVE-2019-14869 was omitted during the rebase from version
  9.25 to 9.27, leaving privileged .forceput operations in the .charkeys
  procedure ins…
severity: high
cvss: 7.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L'
cvssSource: cna
cwe:
  - CWE-648
vendor: Red Hat
product: ghostscript
affected:
  - ghostscript
  - ghostscript
  - ghostscript
  - ghostscript (all versions)
  - ghostscript
published: '2026-10-20'
updated: '2026-10-20'
sourceUpdated: '2026-10-20T07:25:16.741Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-112177'
references:
  - url: 'https://access.redhat.com/security/cve/CVE-2026-112177'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2555564'
    label: RHBZ#2555564
  - url: >-
      https://github.com/ArtifexSoftware/ghostpdl/commit/485904772c5f0aa1140032746e5a0abfc40f4cef
tags:
  - cve.org
ingestedAt: '2026-10-20T07:55:43.636Z'
---

## Overview

A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted during the rebase from version 9.25 to 9.27, leaving privileged .forceput operations in the .charkeys procedure insufficiently protected. Processing a specially crafted PostScript file may allow an attacker to bypass -dSAFER restrictions and access files outside the permitted paths or execute commands with the permissions of the Ghostscript process.

## Affected

- `ghostscript`
- `ghostscript`
- `ghostscript`
- `ghostscript (all versions)`
- `ghostscript`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

### Workarounds

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.