Every CVE Search/ Get API key

CVE-2026-93311

Freedesktop Poppler SampledFunction Function.cc integer overflow

5.3 MediumFix available

A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component SampledFunction. The manipulation of the argument BitsPerSample results in integer overflow. The attack may be performed from remote. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Passive

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
Low

Exploit likelihood

0.56%Up 0.2 points since Sep 18, 2026
90%50%10%1%

What each source reports

CVE List Score used 5.3

Freedesktop Poppler SampledFunction Function.cc integer overflow

A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component SampledFunction. The manipulation of the argument BitsPerSample results in integer overflow. The attack may be performed from remote. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

Record
CVE-2026-93311
CVSS 4.0
5.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R
CVSS 3.0
4.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R
CVSS 2.0
5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:ND/RC:UR
Weakness
CWE-190, CWE-189
Updated
2026-11-02
EUVDEUVD-2026-82612 5.3

A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component SampledFunction. The manipulation of the argument BitsPerSample results in integer overflow. The attack may be performed from remote. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

Record
EUVD-2026-82612
CVSS 4.0
5.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Updated
2026-11-02
GitHub AdvisoriesGHSA-9p2x-92wc-v6h2 2.1

A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function...

A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component SampledFunction. The manipulation of the argument BitsPerSample results in integer overflow. The attack may be performed from remote. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

Record
GHSA-9p2x-92wc-v6h2
CVSS 4.0
2.1 LowCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated
2026-11-02
NVD 2.1

A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component SampledFunction. The manipulation of the argument BitsPerSample results in integer overflow. The attack may be performed from remote. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

Record
CVE-2026-93311
CVSS 4.0
2.1 LowCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-189, CWE-190
Updated
2026-11-02
OSVDEBIAN-CVE-2026-93311 2.1

A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component SampledFunction. The manipulation of the argument BitsPerSample results in integer overflow. The attack may be performed from remote. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

Record
DEBIAN-CVE-2026-93311
CVSS 4.0
2.1 LowCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVRHSA-2026:82452 6.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:82452
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-93311 2.1

A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component SampledFunction. The manipulation of the argument BitsPerSample results in integer overflow. The attack may be performed from remote. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

Record
UBUNTU-CVE-2026-93311
CVSS 4.0
2.1 LowCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
poppler
Debian:12
 All versions, plus listed versions
22.12.0-222.12.0-2+deb12u122.12.0-2+deb12u222.12.0-2+deb12u322.12.0-2.1
Show 40 moreShow less
22.12.0-2.223.08.0-123.08.0-223.12.0-124.02.0-124.02.0-224.02.0-324.02.0-424.02.0-524.02.0-5+loong6424.06.0-124.06.0-224.08.0-124.08.0-224.08.0-324.08.0-425.01.0-125.01.0-225.01.0-325.01.0-425.01.0-525.03.0-125.03.0-1025.03.0-1125.03.0-11.125.03.0-225.03.0-325.03.0-425.03.0-525.03.0-625.03.0-725.03.0-926.01.0-126.01.0-226.01.0-326.01.0-426.01.0-4.126.01.0-526.07.0-126.07.0-2
 None known
poppler
Debian:13
 All versions, plus listed versions
25.03.0-1025.03.0-1125.03.0-11.125.03.0-525.03.0-5+deb13u2
Show 13 moreShow less
25.03.0-5+deb13u325.03.0-5+deb13u425.03.0-625.03.0-725.03.0-926.01.0-126.01.0-226.01.0-326.01.0-426.01.0-4.126.01.0-526.07.0-126.07.0-2
 None known
poppler
Debian:14
 All versions, plus listed versions
25.03.0-1025.03.0-1125.03.0-11.125.03.0-525.03.0-6
Show 10 moreShow less
25.03.0-725.03.0-926.01.0-126.01.0-226.01.0-326.01.0-426.01.0-4.126.01.0-526.07.0-126.07.0-2
 None known
poppler
Red Hat:hummingbird:1
 before 0:26.08.0-1.5.hum1
0:26.08.0-1.5.hum1
poppler-cpp
Red Hat:hummingbird:1
 before 0:26.08.0-1.5.hum1
0:26.08.0-1.5.hum1
poppler-cpp-devel
Red Hat:hummingbird:1
 before 0:26.08.0-1.5.hum1
0:26.08.0-1.5.hum1
poppler-devel
Red Hat:hummingbird:1
 before 0:26.08.0-1.5.hum1
0:26.08.0-1.5.hum1
poppler-glib
Red Hat:hummingbird:1
 before 0:26.08.0-1.5.hum1
0:26.08.0-1.5.hum1
poppler-glib-devel
Red Hat:hummingbird:1
 before 0:26.08.0-1.5.hum1
0:26.08.0-1.5.hum1
poppler-glib-doc
Red Hat:hummingbird:1
 before 0:26.08.0-1.5.hum1
0:26.08.0-1.5.hum1
Show 10 moreShow less
Affected packages
PackageAffectedFixed
poppler-qt6
Red Hat:hummingbird:1
 before 0:26.08.0-1.5.hum1
0:26.08.0-1.5.hum1
poppler-qt6-devel
Red Hat:hummingbird:1
 before 0:26.08.0-1.5.hum1
0:26.08.0-1.5.hum1
poppler-utils
Red Hat:hummingbird:1
 before 0:26.08.0-1.5.hum1
0:26.08.0-1.5.hum1
poppler
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
0.33.0-0ubuntu30.37.0-0ubuntu10.38.0-0ubuntu10.41.0-0ubuntu10.41.0-0ubuntu1.1
Show 23 moreShow less
0.41.0-0ubuntu1.20.41.0-0ubuntu1.30.41.0-0ubuntu1.40.41.0-0ubuntu1.50.41.0-0ubuntu1.60.41.0-0ubuntu1.70.41.0-0ubuntu1.80.41.0-0ubuntu1.90.41.0-0ubuntu1.100.41.0-0ubuntu1.110.41.0-0ubuntu1.120.41.0-0ubuntu1.130.41.0-0ubuntu1.140.41.0-0ubuntu1.150.41.0-0ubuntu1.160.41.0-0ubuntu1.16+esm10.41.0-0ubuntu1.16+esm20.41.0-0ubuntu1.16+esm30.41.0-0ubuntu1.16+esm40.41.0-0ubuntu1.16+esm50.41.0-0ubuntu1.16+esm60.41.0-0ubuntu1.16+esm70.41.0-0ubuntu1.16+esm8
 None known
poppler
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
0.57.0-2ubuntu40.57.0-2ubuntu50.62.0-1ubuntu10.62.0-2ubuntu10.62.0-2ubuntu2
Show 21 moreShow less
0.62.0-2ubuntu2.10.62.0-2ubuntu2.20.62.0-2ubuntu2.40.62.0-2ubuntu2.50.62.0-2ubuntu2.60.62.0-2ubuntu2.70.62.0-2ubuntu2.80.62.0-2ubuntu2.90.62.0-2ubuntu2.100.62.0-2ubuntu2.110.62.0-2ubuntu2.120.62.0-2ubuntu2.130.62.0-2ubuntu2.140.62.0-2ubuntu2.14+esm10.62.0-2ubuntu2.14+esm20.62.0-2ubuntu2.14+esm30.62.0-2ubuntu2.14+esm40.62.0-2ubuntu2.14+esm50.62.0-2ubuntu2.14+esm60.62.0-2ubuntu2.14+esm70.62.0-2ubuntu2.14+esm8
 None known
poppler
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
0.80.0-0ubuntu10.80.0-0ubuntu30.80.0-0ubuntu40.80.0-0ubuntu50.85.0-1ubuntu1
Show 12 moreShow less
0.85.0-1ubuntu30.86.1-0ubuntu10.86.1-0ubuntu1.10.86.1-0ubuntu1.20.86.1-0ubuntu1.30.86.1-0ubuntu1.40.86.1-0ubuntu1.50.86.1-0ubuntu1.60.86.1-0ubuntu1.70.86.1-0ubuntu1.7+esm10.86.1-0ubuntu1.7+esm20.86.1-0ubuntu1.7+esm3
 None known
poppler
Ubuntu:22.04:LTS
 All versions, plus listed versions
21.06.1-121.11.0-1~ubuntu222.02.0-222.02.0-2ubuntu0.122.02.0-2ubuntu0.2
Show 13 moreShow less
22.02.0-2ubuntu0.322.02.0-2ubuntu0.422.02.0-2ubuntu0.522.02.0-2ubuntu0.622.02.0-2ubuntu0.722.02.0-2ubuntu0.822.02.0-2ubuntu0.922.02.0-2ubuntu0.1022.02.0-2ubuntu0.1122.02.0-2ubuntu0.1222.02.0-2ubuntu0.1322.02.0-2ubuntu0.1422.02.0-2ubuntu0.15
 None known
poppler
Ubuntu:24.04:LTS
 All versions, plus listed versions
23.08.0-2ubuntu123.12.0-1ubuntu224.02.0-1ubuntu224.02.0-1ubuntu824.02.0-1ubuntu9
Show 11 moreShow less
24.02.0-1ubuntu9.124.02.0-1ubuntu9.224.02.0-1ubuntu9.324.02.0-1ubuntu9.424.02.0-1ubuntu9.524.02.0-1ubuntu9.624.02.0-1ubuntu9.724.02.0-1ubuntu9.824.02.0-1ubuntu9.924.02.0-1ubuntu9.1024.02.0-1ubuntu9.11
 None known
poppler
Ubuntu:26.10
 All versions, plus listed versions
26.01.0-2build226.01.0-526.07.0-0ubuntu126.07.0-226.07.0-2ubuntu126.07.0-2ubuntu1.1
 None known
poppler
Ubuntu:26.04:LTS
 All versions, plus listed versions
25.03.0-1025.03.0-11.126.01.0-2build226.01.0-2ubuntu0.126.01.0-2ubuntu0.226.01.0-2ubuntu0.3
 None known

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-93311 is a medium vulnerability (CVSS 5.3) in Freedesktop Poppler, published September 18, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.56%, the 46th percentile. Fixed in poppler 0:26.08.0-1.5.hum1.

References

Show 11 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open