LOW 3.3 NVD
CVE-2026-112922
A flaw was found in Ghostscript. A remote attacker could exploit this vulnerability by enticing a user to process a specially crafted PDF or PostScript document
A flaw was found in Ghostscript. A remote attacker could exploit this vulnerability by enticing a user to process a specially crafted PDF or PostScript document containing malicious mesh shading data. Due to improper bounds validation during the processing of indexed color values, Ghostscript triggers an out-of-bounds memory read. Successful exploitation can lead to a Denial of Service (DoS) through an application crash or result in limited information disclosure.
References
- https://access.redhat.com/security/cve/CVE-2026-112922
- https://bugzilla.redhat.com/show_bug.cgi?id=2463016
This low severity vulnerability with a CVSS score of 3.3 was published on 2026-10-30 via NVD.
vulnfeed aggregates 17020 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.