PT-2026-95194 · Freedesktop · Poppler

·

CVE-2026-93311

·

Published

2026-09-18

·

Updated

2026-09-22

CVSS v2.0

5.0

Medium

VectorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Freedesktop Poppler version 26.07.0
Description A remote integer overflow occurs in the SampledFunction::SampledFunction() function within the poppler/Function.cc file of the SampledFunction component. This issue is triggered by the manipulation of the BitsPerSample argument.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the SampledFunction::SampledFunction() function to minimize the risk of exploitation.

Exploit

Integer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-93311
ECHO-AEDC-1C09-58F0

Affected Products

Poppler