The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams. https://nvd.nist.gov/vuln/detail/CVE-2016-7976