CVE-2026-93653

Name of the Vulnerable Software and Affected Versions Poppler (affected versions not specified)

Description A denial of service flaw exists in the Splash backend. A specially crafted PDF containing tiling-pattern geometry near the int32 boundary can trigger the SplashOutputDev::tilingPatternFill function to calculate an attacker-controlled repeat count. This results in an excessively long loop within the pattern-fill scanline routine without associated memory allocation, leading the rendering process to consume 100% of the CPU for an extended period.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.