CVE-2026-93311
published 2026-09-18CVE-2026-93311: A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc…
PriorityP425medium4.3CVSS 3.1
AVNACLPRNUIRSUCNINAL
EPSS
0.56%
46.5th percentile
A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component SampledFunction. The manipulation of the argument BitsPerSample results in integer overflow. The attack may be performed from remote. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| freedesktop | poppler | — | — |
| freedesktop | poppler | — | — |
CVSS provenance
nvdv3.14.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
nvdv4.02.1LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
vendor_redhat4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
A vulnerability was detected in Freedesktop Poppler 26.07.0.
ghsa_unreviewed·2026-09-18
CVE-2026-93311 [LOW] A vulnerability was detected in Freedesktop Poppler 26.07.0.
A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component SampledFunction. The manipulation of the argument BitsPerSample results in integer overflow. The attack may be performed from remote. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.
Red Hat
poppler: Freedesktop Poppler: Denial of service via integer overflow in SampledFunction
vendor_redhat·2026-09-18·CVSS 4.3
CVE-2026-93311 [MEDIUM] CWE-190 poppler: Freedesktop Poppler: Denial of service via integer overflow in SampledFunction
poppler: Freedesktop Poppler: Denial of service via integer overflow in SampledFunction
A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component SampledFunction. The manipulation of the argument BitsPerSample results in integer overflow. The attack may be performed from remote. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.
A flaw was found in Freedesktop Poppler. A remote attacker could exploit an integer overflow vulnerability by manipulating the `BitsPerSample` argument within the `SampledFunction::SampledFunction` function. This manipulation could lead to an integer overflow, pot
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/r1ck9-2q/cve_summit/blob/main/Shift-exponent-undefined-behavior-in-SampledFunction-Function.cc-376.mdhttps://gitlab.freedesktop.org/poppler/poppler/-/work_items/1758https://vuldb.com/cve/CVE-2026-93311https://vuldb.com/submit/942344https://vuldb.com/vuln/406609https://vuldb.com/vuln/406609/cti
2026-09-18
Published