It was discovered that the ghostscript .type operator did not properly validate its operands. A specially crafted PostScript document could exploit this to crash ghostscript or, possibly, execute arbitrary code in the context of the ghostscript process.
Please see <https://bugzilla.redhat.com/show_bug.cgi?id=1619748#c3>