CVE-2026-112922

LOW Status: Awaiting Analysis

CVSS Scores

CVSS v3.x Base Score
3.3
LOW

Description

A flaw was found in Ghostscript. A remote attacker could exploit this vulnerability by enticing a user to process a specially crafted PDF or PostScript document containing malicious mesh shading data. Due to improper bounds validation during the processing of indexed color values, Ghostscript triggers an out-of-bounds memory read. Successful exploitation can lead to a Denial of Service (DoS) through an application crash or result in limited information disclosure.

Published
October 30, 2026 2:17 AM
Last Modified
October 30, 2026 2:17 AM
Source
[email protected]

Weaknesses (CWE)

CWE-125

References

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry