CVE-2026-111132

A flaw was found in libgxps. An attacker can exploit this vulnerability by convincing a user to open a specially crafted XML Paper Specification (XPS) document containing malformed curve segment attributes. Successful exploitation triggers an out-of-bounds memory read, primarily causing an application crash that results in a Denial of Service (DoS), or potentially exposing adjacent memory data.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Avoid opening untrusted or unsolicited XPS files in document viewers such as Evince, and do not process unverified files with utilities linked against libgxps.

On systems where XPS document rendering is unnecessary, exposure can be eliminated by removing the libgxps package:

dnf remove libgxps

Caveat: Removing libgxps may prompt the removal of dependent graphical desktop packages or viewer components. Verify that required desktop functionality is not impaired before proceeding. Headless server environments remain unaffected.