MEDIUM

CVE-2026-93313

2026-09-18 CVSS v3.1

CVSS

6.3

Description

A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTableSeg of the file poppler/JBIG2Stream.cc. Performing a manipulation results in integer overflow. The attack can be initiated remotely. The exploit has been made public and could be used. The patch is named eb87cf711563894649bd0c365baa479401dc6d51. To fix this issue, it is recommended to deploy a patch.

Weakness (CWE)

CWE-189 Numeric Errors

CWE-190 Integer Overflow

EPSS Score

0.25%

Probability of exploitation in next 30 days

16.4th percentile

References

https://github.com/r1ck9-2q/cve_summit/blob/main/Signed-integer-overflow-in-JBIG2Stream-readCodeTableSeg-JBIG2Stream.cc-4118.md https://gitlab.freedesktop.org/poppler/poppler/-/commit/eb87cf711563894649bd0c365baa479401dc6d51?merge_request_iid=2322 https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2322 https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1760 https://vuldb.com/cve/CVE-2026-93313 https://vuldb.com/submit/942346 https://vuldb.com/vuln/406612 https://vuldb.com/vuln/406612/cti

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE