Heap buffer overflow in Ghostscript's JPEG 2000 output adapter (versions before 10.08.0; CVSS 3.1 9.8 from CNA VulnCheck). A PDF with mismatched JPEG 2000 component subsampling overflows a row buffer and corrupts allocator metadata. Wordfence found it with its AI-assisted Argus system and showed unauthenticated RCE through a WordPress → Imagick → ImageMagick → Ghostscript thumbnail chain on a purpose-built server; against stock distro packages in its lab, exploitation was not reliable. Artifex fixed it in 10.08.0 (Sept 8); check your distro's backports and rebuild container images. No in-the-wild exploitation reported. If you can't patch, block untrusted PDF uploads or disable PDF in the ImageMagick policy.