CVE-2026-102620
published 2026-09-29CVE-2026-102620: A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file…
PriorityP412low3.3CVSS 3.1
AVLACLPRLUINSUCNILAN
EPSS
0.11%
1.6th percentile
A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 245d3c6823377755f2c1d5fdddd010279c6ed94d. It is suggested to install a patch to address this issue.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| freedesktop | poppler | — | — |
| freedesktop | poppler | — | — |
| freedesktop | poppler | — | — |
| freedesktop | poppler | — | — |
| ubuntu | poppler | — | — |
CVSS provenance
nvdv3.13.3LOWCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
nvdv4.01.9LOWCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.01.7LOWAV:L/AC:L/Au:S/C:N/I:P/A:N
vendor_redhat3.3LOW
vendor_ubuntu3.3LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
poppler vulnerabilities
vendor_ubuntu·2026-10-07·CVSS 3.3
CVE-2026-93314 [LOW] poppler vulnerabilities
Title: poppler vulnerabilities
Summary: poppler could be made to crash or run programs as your login if it
opened a specially crafted file.
It was discovered that Poppler had an integer overflow in
FoFiTrueType::cvtSfnts. An attacker could possibly use this issue to
cause Poppler to crash, resulting in a denial of service, or execute
arbitrary code.
(CVE-2026-102620)
It was discovered that Poppler had an integer overflow in
SplashClip::clipToPath. An attacker could possibly use this issue to
cause Poppler to crash, resulting in a denial of service, or execute
arbitrary code.
(CVE-2026-102621)
It was discovered that Poppler had a null pointer dereference in
JBIG2Stream. An attacker could possibly use this issue to cause
Poppler to crash, resulting in a denial of service.
(CVE-2026-93312
Red Hat
poppler: poppler: Data corruption via integer overflow in FoFiTrueType::cvtSfnts
vendor_redhat·2026-09-29·CVSS 3.3
CVE-2026-102620 [LOW] CWE-190 poppler: poppler: Data corruption via integer overflow in FoFiTrueType::cvtSfnts
poppler: poppler: Data corruption via integer overflow in FoFiTrueType::cvtSfnts
A flaw was found in Poppler. An integer overflow vulnerability in the TrueType font handling code can allow a local user to cause data corruption. By providing a specially crafted font file processed by the FoFiTrueType::cvtSfnts function, an attacker can cause improper data modification and unexpected application behavior.
Package: poppler (Red Hat Enterprise Linux 10) - Fix deferred
Package: poppler (Red Hat Enterprise Linux 6) - Out of support scope
Package: compat-poppler022 (Red Hat Enterprise Linux 7) - Fix deferred
Package: poppler (Red Hat Enterprise Linux 7) - Fix deferred
Package: poppler (Red Hat Enterprise Linux 8) - Fix deferred
Package: poppler (Red Hat Enterprise Linux 9) - Fix deferred
GHSA
A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0.
ghsa_unreviewed·2026-09-29
CVE-2026-102620 [LOW] A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0.
A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 245d3c6823377755f2c1d5fdddd010279c6ed94d. It is suggested to install a patch to address this issue.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-102620 mingw-poppler: poppler: Data corruption via integer overflow in FoFiTrueType::cvtSfnts [fedora-all]
bugzilla·2026-10-01·CVSS 3.3
CVE-2026-102620 [LOW] CVE-2026-102620 mingw-poppler: poppler: Data corruption via integer overflow in FoFiTrueType::cvtSfnts [fedora-all]
CVE-2026-102620 mingw-poppler: poppler: Data corruption via integer overflow in FoFiTrueType::cvtSfnts [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 245d3c6823377755f2c1d5fdddd010279c6ed94d. It is suggested to install a patch to address this issue.
Bugzilla
CVE-2026-102620 poppler: poppler: Data corruption via integer overflow in FoFiTrueType::cvtSfnts [fedora-all]
bugzilla·2026-10-01·CVSS 3.3
CVE-2026-102620 [LOW] CVE-2026-102620 poppler: poppler: Data corruption via integer overflow in FoFiTrueType::cvtSfnts [fedora-all]
CVE-2026-102620 poppler: poppler: Data corruption via integer overflow in FoFiTrueType::cvtSfnts [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 245d3c6823377755f2c1d5fdddd010279c6ed94d. It is suggested to install a patch to address this issue.
Bugzilla
CVE-2026-102620 poppler: poppler: Data corruption via integer overflow in FoFiTrueType::cvtSfnts
bugzilla·2026-09-29·CVSS 3.3
CVE-2026-102620 [LOW] CVE-2026-102620 poppler: poppler: Data corruption via integer overflow in FoFiTrueType::cvtSfnts
CVE-2026-102620 poppler: poppler: Data corruption via integer overflow in FoFiTrueType::cvtSfnts
A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 245d3c6823377755f2c1d5fdddd010279c6ed94d. It is suggested to install a patch to address this issue.
https://github.com/r1ck9-2q/cve_summit/blob/main/Signed-integer-overflow-in-FoFiTrueType-cvtSfnts-FoFiTrueType.cc-1210.mdhttps://gitlab.freedesktop.org/poppler/poppler/-/commit/245d3c6823377755f2c1d5fdddd010279c6ed94dhttps://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2326https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1762https://vuldb.com/cve/CVE-2026-102620https://vuldb.com/submit/942348https://vuldb.com/vuln/411410https://vuldb.com/vuln/411410/cti
2026-09-29
Published