Heap-pointer disclosure via empty BaseFont name fallback

Information disclosure in Artifex Ghostscript before 10.03.0 allows local users to obtain a heap pointer through pdfwrite output. The pdf_base_font_alloc function formats the copied font object's heap address as a hexadecimal .F fallback when an input font name is empty, then embeds that value in the constructed BaseFont name. Exploitation requires low-privileged local execution, an empty font name, the pdfwrite device, and read access to the generated output; the reported effect is address disclosure only.