{"id":"CVE-2026-112922","aliases":[],"cve":{"records":[{"id":"CVE-2026-112922","source":"redhat","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-19T21:20:24.498Z","published":"2026-10-30T01:24:32.059Z","modified":"2026-10-30T15:58:20.193Z"}],"publishers":[{"name":"redhat","role":"CNA","organizationId":"53f830b8-0a3f-465b-8143-3b8a9948e749","modified":"2026-10-30T01:24:32.059Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-30T15:58:20.193Z"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-112922","tags":["vdb-entry","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2463016","tags":["issue-tracking","x_refsource_REDHAT"],"source":"redhat"}],"weaknesses":[{"id":"CWE-125","description":"Out-of-bounds Read","source":"redhat"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-30T15:20:46.922332Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Ghostscript: out-of-bounds read in ghostscript shade_next_color via integer overflow of indexed color index in mesh shading","titleSource":"redhat","descriptionSource":"redhat","description":"A flaw was found in Ghostscript. A remote attacker could exploit this vulnerability by enticing a user to process a specially crafted PDF or PostScript document containing malicious mesh shading data. Due to improper bounds validation during the processing of indexed color values, Ghostscript triggers an out-of-bounds memory read. Successful exploitation can lead to a Denial of Service (DoS) through an application crash or result in limited information disclosure.","score":3.3,"severity":"low","published":"2026-10-30T01:24:32.059Z","modified":"2026-10-30T15:58:20.193Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 10","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:10"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-112922"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 6","platforms":[],"versions":[],"defaultStatus":"unknown","cpes":["cpe:/o:redhat:enterprise_linux:6"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-112922"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 7","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:7"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-112922"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:8"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-112922"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-112922"}],"remediation":[{"text":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.","source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-112922"}],"references":["https://access.redhat.com/security/cve/CVE-2026-112922","https://bugzilla.redhat.com/show_bug.cgi?id=2463016"],"sources":[{"name":"CVE","id":"CVE-2026-112922","modified":"2026-10-30T15:58:20.193Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-112922"}],"assessments":[{"source":"redhat","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","score":3.3}],"sourceAffected":[],"observedAt":"2026-10-30T17:19:22.494Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T10:00:31.629Z"},"coverage":[{"source":"NVD","status":"refresh-failed","attemptedAt":"2026-10-30T03:00:40.143Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-10-30T03:00:32.616Z","attemptedAt":"2026-10-30T03:00:32.616Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-30T03:00:32.543Z","attemptedAt":"2026-10-30T03:00:32.543Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-10-30T03:00:33.882Z","attemptedAt":"2026-10-30T03:00:33.882Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-113475","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-113475","modified":"Oct 30, 2026, 1:24:32 AM","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","checkedAt":"2026-10-30T03:00:32.543Z"}],"aiSummary":{"text":"Ghostscript has an out-of-bounds read vulnerability via integer overflow of indexed color index in mesh shading. A remote attacker could exploit this by enticing a user to process a specially crafted PDF or PostScript document. This may lead to a Denial of Service or limited information disclosure.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:14:18.732Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-112922"}]}}