CVE-2022-35649: The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code.

Security readout for executives and security teams

This is a Moodle remote code execution risk tied to unsafe PostScript parsing when the host uses GhostScript older than 9.50. A successful attack could fully compromise a vulnerable system. The supplied sources do not provide CVSS scoring or evidence of active exploitation. Exposure is most likely for Moodle sites below the fixed releases that also have GhostScript older than 9.50 involved in PostScript processing. Source data does not identify specific platforms, modules, or default configuration requirements beyond Moodle and GhostScript version dependency. Prioritize remediation for internet-facing or untrusted-user Moodle deployments, especially where GhostScript is present and outdated. Treat as high urgency because the stated impact is remote code execution and possible full compromise, despite missing CVSS and exploitation evidence. Mitigation focus: Upgrade Moodle to 4.0.2, 3.11.8, 3.9.15, or later supported releases.; Ensure GhostScript is version 9.50 or newer where Moodle can invoke it.; Review Moodle advisory and MDL-75044 commits for deployment-specific guidance..

Prepared

Jun 2, 2026, 08:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.