CVE-2026-93311
Fixed in a distro release EPSS <1%CVSS 4.3
A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component SampledFunction. The manipulation of the argument BitsPerSample results in integer overflow. The attack may be performed from remote. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.
Products: freedesktop poppler
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | poppler | no fix |
| Debian 13 | poppler | no fix |
| Debian 14 | poppler | no fix |
| Red Hat hummingbird 1 | poppler | 0:26.08.0-1.5.hum1 |
| Red Hat hummingbird 1 | poppler-cpp | 0:26.08.0-1.5.hum1 |
| Red Hat hummingbird 1 | poppler-cpp-devel | 0:26.08.0-1.5.hum1 |
| Red Hat hummingbird 1 | poppler-devel | 0:26.08.0-1.5.hum1 |
| Red Hat hummingbird 1 | poppler-glib | 0:26.08.0-1.5.hum1 |
| Red Hat hummingbird 1 | poppler-glib-devel | 0:26.08.0-1.5.hum1 |
| Red Hat hummingbird 1 | poppler-glib-doc | 0:26.08.0-1.5.hum1 |
| Red Hat hummingbird 1 | poppler-qt6 | 0:26.08.0-1.5.hum1 |
| Red Hat hummingbird 1 | poppler-qt6-devel | 0:26.08.0-1.5.hum1 |
| Red Hat hummingbird 1 | poppler-utils | 0:26.08.0-1.5.hum1 |
| Ubuntu 22.04 LTS | poppler | no fix |
| Ubuntu 24.04 LTS | poppler | no fix |
| Ubuntu 26.04 LTS | poppler | no fix |
| Ubuntu 26.10 | poppler | no fix |
| Ubuntu Pro 16.04 LTS | poppler | no fix |
| Ubuntu Pro 18.04 LTS | poppler | no fix |
| Ubuntu Pro 20.04 LTS | poppler | no fix |