CVE-2026-93314

EUVD-2026-82624
A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of the argument segCnt can lead to integer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. This patch is called ed2a5538cf0a8d3ff908191eda9b73f91a5f952a. It is advisable to implement a patch to correct this issue.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
VulDBCNA
6.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 15.65%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
freedesktoppoppler
26.7.0
CNA
Debian logo
Debian Releases
Debian Product
Codename
poppler
bookworm
postponed
bookworm (security)
vulnerable
forky
26.07.0-3
fixed
sid
26.07.0-3
fixed
trixie
no-dsa
trixie (security)
vulnerable
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
poppler
bionic
needs-triage
focal
needs-triage
jammy
Fixed 22.02.0-2ubuntu0.14
released
noble
Fixed 24.02.0-1ubuntu9.10
released
resolute
Fixed 26.01.0-2ubuntu0.2
released
xenial
needs-triage
Common Weakness Enumeration
References
https://github.com/r1ck9-2q/cve_summit/blob/main/Signed-integer-overflow-in-FoFiTrueType-mapCodeToGID-FoFiTrueType.cc-608.md
https://gitlab.freedesktop.org/poppler/poppler/-/commit/ed2a5538cf0a8d3ff908191eda9b73f91a5f952a?merge_request_iid=2315
https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2315
https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1761
https://vuldb.com/cve/CVE-2026-93314
https://vuldb.com/submit/942347
https://vuldb.com/vuln/406613
https://vuldb.com/vuln/406613/cti