EPS (Encapsulated PostScript) is a graphics file format that stores PostScript instructions for describing an image. Applications often rely on an external renderer, such as Ghostscript, to convert EPS into a viewable or printable format.
In cybersecurity, EPS matters because processing it can cross a trust boundary: an application passes data or filenames to a separate program that interprets PostScript and its own command-line options. Malicious EPS files, or filenames crafted to resemble renderer arguments, may exploit unsafe handling. Defenses include updating image-processing software, validating filenames, restricting untrusted EPS uploads, and isolating renderers with limited privileges.