A crafted PostScript program defeats the -dSAFER sandbox and runs an attacker-chosen shell command when Ghostscript renders it. The exploit chains a Type 5 shading out-of-bounds heap write with a procedure-stream use-after-free information leak. The leak defeats ASLR and locates Ghostscript's SAFER path-control state in memory; the write flips that state to inactive; then the program opens a %pipe% stream to run the command.

A Twitch chat overlay exploited a vulnerable Chromium renderer and V8 bug to execute native code on a streamer's machine, bypassing the browser sandbox. The vulnerability was patched in Chrome 128, but an OBS update is underway to upgrade the embedded browser and enable the sandbox.