CVE-2026-102621
published 2026-09-29CVE-2026-102621: A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function SplashClip::clipToPath of the file splash/SplashClip.cc. Such…
PriorityP410low3.3CVSS 3.1
AVLACLPRLUINSUCNINAL
EPSS
0.11%
1.4th percentile
A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function SplashClip::clipToPath of the file splash/SplashClip.cc. Such manipulation leads to integer overflow. The attack can only be performed from a local environment. The exploit is publicly available and might be used. Upgrading to version 26.09.0 is able to address this issue. The name of the patch is 323c91036d99926a8b90dc14329f7b40aece22f8. It is recommended to upgrade the affected component.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| freedesktop | poppler | — | — |
| freedesktop | poppler | — | — |
| ubuntu | poppler | — | — |
CVSS provenance
nvdv3.13.3LOWCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
nvdv4.01.9LOWCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.01.7LOWAV:L/AC:L/Au:S/C:N/I:N/A:P
vendor_redhat3.3LOW
vendor_ubuntu3.3LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
poppler vulnerabilities
vendor_ubuntu·2026-10-07·CVSS 3.3
CVE-2026-93314 [LOW] poppler vulnerabilities
Title: poppler vulnerabilities
Summary: poppler could be made to crash or run programs as your login if it
opened a specially crafted file.
It was discovered that Poppler had an integer overflow in
FoFiTrueType::cvtSfnts. An attacker could possibly use this issue to
cause Poppler to crash, resulting in a denial of service, or execute
arbitrary code.
(CVE-2026-102620)
It was discovered that Poppler had an integer overflow in
SplashClip::clipToPath. An attacker could possibly use this issue to
cause Poppler to crash, resulting in a denial of service, or execute
arbitrary code.
(CVE-2026-102621)
It was discovered that Poppler had a null pointer dereference in
JBIG2Stream. An attacker could possibly use this issue to cause
Poppler to crash, resulting in a denial of service.
(CVE-2026-93312
Red Hat
poppler: poppler: Denial of Service via integer overflow in SplashClip
vendor_redhat·2026-09-29·CVSS 3.3
CVE-2026-102621 [LOW] CWE-190 poppler: poppler: Denial of Service via integer overflow in SplashClip
poppler: poppler: Denial of Service via integer overflow in SplashClip
A flaw was found in poppler. An integer overflow vulnerability exists in the SplashClip rendering component when handling path clipping operations. A local attacker could exploit this flaw by providing specially crafted input, causing the application to crash and resulting in a Denial of Service (DoS).
Package: poppler (Red Hat Enterprise Linux 10) - Fix deferred
Package: poppler (Red Hat Enterprise Linux 6) - Out of support scope
Package: compat-poppler022 (Red Hat Enterprise Linux 7) - Fix deferred
Package: poppler (Red Hat Enterprise Linux 7) - Fix deferred
Package: poppler (Red Hat Enterprise Linux 8) - Fix deferred
Package: poppler (Red Hat Enterprise Linux 9) - Fix deferred
Package: poppler (Red Hat Harden
GHSA
A vulnerability was identified in Freedesktop Poppler up to 26.08.0.
ghsa_unreviewed·2026-09-30
CVE-2026-102621 [LOW] A vulnerability was identified in Freedesktop Poppler up to 26.08.0.
A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function SplashClip::clipToPath of the file splash/SplashClip.cc. Such manipulation leads to integer overflow. The attack can only be performed from a local environment. The exploit is publicly available and might be used. Upgrading to version 26.09.0 is able to address this issue. The name of the patch is 323c91036d99926a8b90dc14329f7b40aece22f8. It is recommended to upgrade the affected component.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-102621 mingw-poppler: poppler: Denial of Service via integer overflow in SplashClip [fedora-all]
bugzilla·2026-09-30·CVSS 3.3
CVE-2026-102621 [LOW] CVE-2026-102621 mingw-poppler: poppler: Denial of Service via integer overflow in SplashClip [fedora-all]
CVE-2026-102621 mingw-poppler: poppler: Denial of Service via integer overflow in SplashClip [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function SplashClip::clipToPath of the file splash/SplashClip.cc. Such manipulation leads to integer overflow. The attack can only be performed from a local environment. The exploit is publicly available and might be used. Upgrading to version 26.09.0 is able to address this issue. The name of the patch is 323c91036d99926a8b90dc14329f7b40aece22f8. It is recommended to upgrade the
Bugzilla
CVE-2026-102621 poppler: poppler: Denial of Service via integer overflow in SplashClip [fedora-all]
bugzilla·2026-09-30·CVSS 3.3
CVE-2026-102621 [LOW] CVE-2026-102621 poppler: poppler: Denial of Service via integer overflow in SplashClip [fedora-all]
CVE-2026-102621 poppler: poppler: Denial of Service via integer overflow in SplashClip [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function SplashClip::clipToPath of the file splash/SplashClip.cc. Such manipulation leads to integer overflow. The attack can only be performed from a local environment. The exploit is publicly available and might be used. Upgrading to version 26.09.0 is able to address this issue. The name of the patch is 323c91036d99926a8b90dc14329f7b40aece22f8. It is recommended to upgrade the affect
Bugzilla
CVE-2026-102621 poppler: poppler: Denial of Service via integer overflow in SplashClip
bugzilla·2026-09-29·CVSS 3.3
CVE-2026-102621 [LOW] CVE-2026-102621 poppler: poppler: Denial of Service via integer overflow in SplashClip
CVE-2026-102621 poppler: poppler: Denial of Service via integer overflow in SplashClip
A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function SplashClip::clipToPath of the file splash/SplashClip.cc. Such manipulation leads to integer overflow. The attack can only be performed from a local environment. The exploit is publicly available and might be used. Upgrading to version 26.09.0 is able to address this issue. The name of the patch is 323c91036d99926a8b90dc14329f7b40aece22f8. It is recommended to upgrade the affected component.
https://github.com/r1ck9-2q/cve_summit/blob/main/Signed-integer-overflow-in-SplashClip-clipToPath-SplashClip.cc-214.mdhttps://gitlab.freedesktop.org/poppler/poppler/-/commit/323c91036d99926a8b90dc14329f7b40aece22f8https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2325https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1763https://vuldb.com/cve/CVE-2026-102621https://vuldb.com/submit/942349https://vuldb.com/vuln/411411https://vuldb.com/vuln/411411/cti
2026-09-29
Published