CVE-2022-35649: Fedoraproject Fedora

Critical severity, CVSS 9.8. EPSS: 8.8% chance of exploitation in the next 30 days.

The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Affected products

• Fedoraproject Fedora: version 35 only; version 36 only
• Moodle Moodle: from 3.9.0, before 3.9.15 (fixed in 3.9.15); from 3.11.0, before 3.11.8 (fixed in 3.11.8); from 4.0.0, before 4.0.2 (fixed in 4.0.2)

Published 2022-07-25. Last modified 2026-06-17.