CVE-2026-91382

A flaw was found in OpenJDK's 2D component. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted data to an application that processes input using affected 2D APIs. Successful exploitation could allow the attacker to create, modify, or delete accessible data and cause a partial Denial of Service (DoS).

This vulnerability is classified as Moderate severity because successful exploitation demands high attack complexity, requiring an application to expose endpoints that feed untrusted graphical assets into OpenJDK 2D processing routines. In standard Red Hat Enterprise Linux deployments, Java applications are not broadly exposed unless services explicitly accept and render external image data without prior validation. Because the flaw cannot be leveraged to read confidential system memory or achieve arbitrary remote command execution, the impact remains limited to data tampering and partial service disruption within the executing runtime process.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.