Live › vulnerability › CVE-2026-112922
Ghostscript reads memory outside its bounds when processing indexed color values in a crafted mesh shading PDF or PostScript file. An attacker who gets a user to open such a document can crash the process or leak limited information.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 02:28 UTC. All times on this page are UTC.
Any system that runs Ghostscript to render or convert PDF or PostScript files, such as document converters, print or preview pipelines, or upload processing, is potentially exposed. The sources do not name affected versions or say whether default configurations are vulnerable.
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A flaw was found in Ghostscript. A remote attacker could exploit this vulnerability by enticing a user to process a specially crafted PDF or PostScript document containing malicious mesh shading data. Due to improper bounds validation during the processing of indexed color values, Ghostscript triggers an out-of-bounds memory read. Successful exploitation can lead to a Denial of Service (DoS) through an application crash or result in limited information disclosure.
This page as .md · .json · in your agent: get_signal("CVE-2026-112922")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.