Every CVE Search/ Get API key

CVE-2026-93314

Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflow

5.3 MediumFix available

A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of the argument segCnt can lead to integer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. This patch is called ed2a5538cf0a8d3ff908191eda9b73f91a5f952a. It is advisable to implement a patch to correct this issue.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Passive

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
Low

Exploit likelihood

0.24%Unchanged since Sep 18, 2026
90%50%10%1%

What each source reports

CVE List Score used 5.3

Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflow

A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of the argument segCnt can lead to integer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. This patch is called ed2a5538cf0a8d3ff908191eda9b73f91a5f952a. It is advisable to implement a patch to correct this issue.

Record
CVE-2026-93314
CVSS 4.0
5.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
CVSS 3.0
6.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
CVSS 2.0
7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C
Weakness
CWE-190, CWE-189
Updated
2026-11-02
EUVDEUVD-2026-82624 5.3

A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of the argument segCnt can lead to integer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. This patch is called ed2a5538cf0a8d3ff908191eda9b73f91a5f952a. It is advisable to implement a patch to correct this issue.

Record
EUVD-2026-82624
CVSS 4.0
5.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Updated
2026-11-02
GitHub AdvisoriesGHSA-2g5c-g4rf-f9jv 2.1

A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function...

A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of the argument segCnt can lead to integer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. This patch is called ed2a5538cf0a8d3ff908191eda9b73f91a5f952a. It is advisable to implement a patch to correct this issue.

Record
GHSA-2g5c-g4rf-f9jv
CVSS 4.0
2.1 LowCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-02
NVD 2.1

A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of the argument segCnt can lead to integer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. This patch is called ed2a5538cf0a8d3ff908191eda9b73f91a5f952a. It is advisable to implement a patch to correct this issue.

Record
CVE-2026-93314
CVSS 4.0
2.1 LowCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-189, CWE-190
Updated
2026-11-02
OSV 2.1

Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflow

A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of the argument segCnt can lead to integer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. This patch is called ed2a5538cf0a8d3ff908191eda9b73f91a5f952a. It is advisable to implement a patch to correct this issue.

Record
CVE-2026-93314
CVSS 4.0
2.1 LowCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Weakness
CWE-189, CWE-190
Updated
2026-11-02
OSVDEBIAN-CVE-2026-93314 2.1

A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of the argument segCnt can lead to integer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. This patch is called ed2a5538cf0a8d3ff908191eda9b73f91a5f952a. It is advisable to implement a patch to correct this issue.

Record
DEBIAN-CVE-2026-93314
CVSS 4.0
2.1 LowCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
Show 7 moreShow less
OSVOESA-2026-4702 6.3

poppler security update

is a PDF rendering library.

Security Fix(es):

A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dereference. It is possible to initiate the attack remotely. The exploit has been published and may be used. Upgrading to version 26.08.0 is recommended to address this issue. Patch name: 5e49250f13b0390edeb3f90eb4c02c9941f97067. Upgrading the affected component is advised.(CVE-2026-93312)

A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTableSeg of the file poppler/JBIG2Stream.cc. Performing a manipulation results in integer overflow. The attack can be initiated remotely. The exploit has been made public and could be used. The patch is named eb87cf711563894649bd0c365baa479401dc6d51. To fix this issue, it is recommended to deploy a patch.(CVE-2026-93313)

A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of the argument segCnt can lead to integer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. This patch is called ed2a5538cf0a8d3ff908191eda9b73f91a5f952a. It is advisable to implement a patch to correct this issue.(CVE-2026-93314)

Record
OESA-2026-4702
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-04
OSVOESA-2026-4703 6.3

poppler security update

is a PDF rendering library.

Security Fix(es):

A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dereference. It is possible to initiate the attack remotely. The exploit has been published and may be used. Upgrading to version 26.08.0 is recommended to address this issue. Patch name: 5e49250f13b0390edeb3f90eb4c02c9941f97067. Upgrading the affected component is advised.(CVE-2026-93312)

A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTableSeg of the file poppler/JBIG2Stream.cc. Performing a manipulation results in integer overflow. The attack can be initiated remotely. The exploit has been made public and could be used. The patch is named eb87cf711563894649bd0c365baa479401dc6d51. To fix this issue, it is recommended to deploy a patch.(CVE-2026-93313)

A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of the argument segCnt can lead to integer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. This patch is called ed2a5538cf0a8d3ff908191eda9b73f91a5f952a. It is advisable to implement a patch to correct this issue.(CVE-2026-93314)

Record
OESA-2026-4703
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-04
OSVOESA-2026-4704 6.3

poppler security update

is a PDF rendering library.

Security Fix(es):

A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dereference. It is possible to initiate the attack remotely. The exploit has been published and may be used. Upgrading to version 26.08.0 is recommended to address this issue. Patch name: 5e49250f13b0390edeb3f90eb4c02c9941f97067. Upgrading the affected component is advised.(CVE-2026-93312)

A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTableSeg of the file poppler/JBIG2Stream.cc. Performing a manipulation results in integer overflow. The attack can be initiated remotely. The exploit has been made public and could be used. The patch is named eb87cf711563894649bd0c365baa479401dc6d51. To fix this issue, it is recommended to deploy a patch.(CVE-2026-93313)

A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of the argument segCnt can lead to integer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. This patch is called ed2a5538cf0a8d3ff908191eda9b73f91a5f952a. It is advisable to implement a patch to correct this issue.(CVE-2026-93314)

Record
OESA-2026-4704
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-04
OSVRHSA-2026:58482 6.3

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:58482
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2026-93314 2.1

A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of the argument segCnt can lead to integer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. This patch is called ed2a5538cf0a8d3ff908191eda9b73f91a5f952a. It is advisable to implement a patch to correct this issue.

Record
UBUNTU-CVE-2026-93314
CVSS 4.0
2.1 LowCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVopenSUSE-SU-2026:11885-1 No score

libpoppler-cpp3-26.09.0-2.1 on GA media

These are all security issues fixed in the libpoppler-cpp3-26.09.0-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11885-1
Updated
2026-11-02
OSVUSN-8894-1 No score

poppler vulnerabilities

It was discovered that Poppler had an integer overflow in FoFiTrueType::cvtSfnts. An attacker could possibly use this issue to cause Poppler to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2026-102620)

It was discovered that Poppler had an integer overflow in SplashClip::clipToPath. An attacker could possibly use this issue to cause Poppler to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2026-102621)

It was discovered that Poppler had a null pointer dereference in JBIG2Stream. An attacker could possibly use this issue to cause Poppler to crash, resulting in a denial of service. (CVE-2026-93312)

It was discovered that Poppler had an integer overflow in JBIG2Stream::readCodeTableSeg. An attacker could possibly use this issue to cause Poppler to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2026-93313)

It was discovered that Poppler had an integer overflow in FoFiTrueType::mapCodeToGID. An attacker could possibly use this issue to cause Poppler to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2026-93314)

Record
USN-8894-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
poppler
Debian:12
 All versions, plus listed versions
22.12.0-222.12.0-2+deb12u122.12.0-2+deb12u222.12.0-2+deb12u322.12.0-2.1
Show 41 moreShow less
22.12.0-2.223.08.0-123.08.0-223.12.0-124.02.0-124.02.0-224.02.0-324.02.0-424.02.0-524.02.0-5+loong6424.06.0-124.06.0-224.08.0-124.08.0-224.08.0-324.08.0-425.01.0-125.01.0-225.01.0-325.01.0-425.01.0-525.03.0-125.03.0-1025.03.0-1125.03.0-11.125.03.0-225.03.0-325.03.0-425.03.0-525.03.0-625.03.0-725.03.0-926.01.0-126.01.0-226.01.0-326.01.0-426.01.0-4.126.01.0-526.07.0-126.07.0-226.07.0-3
 None known
poppler
Debian:13
 All versions, plus listed versions
25.03.0-1025.03.0-1125.03.0-11.125.03.0-525.03.0-5+deb13u2
Show 14 moreShow less
25.03.0-5+deb13u325.03.0-5+deb13u425.03.0-625.03.0-725.03.0-926.01.0-126.01.0-226.01.0-326.01.0-426.01.0-4.126.01.0-526.07.0-126.07.0-226.07.0-3
 None known
poppler
Debian:14
 before 26.07.0-3, plus listed versions
25.03.0-1025.03.0-1125.03.0-11.125.03.0-525.03.0-6
Show 10 moreShow less
25.03.0-725.03.0-926.01.0-126.01.0-226.01.0-326.01.0-426.01.0-4.126.01.0-526.07.0-126.07.0-2
26.07.0-3
poppler
openEuler:22.03-LTS-SP4
From an advisory covering 3 CVEs
 before 0.90.0-19.oe2203sp4
0.90.0-19.oe2203sp4
poppler
openEuler:24.03-LTS-SP1
From an advisory covering 3 CVEs
 before 23.12.0-15.oe2403sp1
23.12.0-15.oe2403sp1
poppler
openEuler:24.03-LTS-SP3
From an advisory covering 3 CVEs
 before 23.12.0-15.oe2403sp3
23.12.0-15.oe2403sp3
poppler
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:26.08.0-1.hum1
0:26.08.0-1.hum1
poppler-cpp
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:26.08.0-1.hum1
0:26.08.0-1.hum1
poppler-cpp-devel
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:26.08.0-1.hum1
0:26.08.0-1.hum1
poppler-devel
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:26.08.0-1.hum1
0:26.08.0-1.hum1
Show 16 moreShow less
Affected packages
PackageAffectedFixed
poppler-glib
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:26.08.0-1.hum1
0:26.08.0-1.hum1
poppler-glib-devel
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:26.08.0-1.hum1
0:26.08.0-1.hum1
poppler-glib-doc
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:26.08.0-1.hum1
0:26.08.0-1.hum1
poppler-qt6
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:26.08.0-1.hum1
0:26.08.0-1.hum1
poppler-qt6-devel
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:26.08.0-1.hum1
0:26.08.0-1.hum1
poppler-utils
Red Hat:hummingbird:1
From an advisory covering 2 CVEs
 before 0:26.08.0-1.hum1
0:26.08.0-1.hum1
poppler
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
0.33.0-0ubuntu30.37.0-0ubuntu10.38.0-0ubuntu10.41.0-0ubuntu10.41.0-0ubuntu1.1
Show 23 moreShow less
0.41.0-0ubuntu1.20.41.0-0ubuntu1.30.41.0-0ubuntu1.40.41.0-0ubuntu1.50.41.0-0ubuntu1.60.41.0-0ubuntu1.70.41.0-0ubuntu1.80.41.0-0ubuntu1.90.41.0-0ubuntu1.100.41.0-0ubuntu1.110.41.0-0ubuntu1.120.41.0-0ubuntu1.130.41.0-0ubuntu1.140.41.0-0ubuntu1.150.41.0-0ubuntu1.160.41.0-0ubuntu1.16+esm10.41.0-0ubuntu1.16+esm20.41.0-0ubuntu1.16+esm30.41.0-0ubuntu1.16+esm40.41.0-0ubuntu1.16+esm50.41.0-0ubuntu1.16+esm60.41.0-0ubuntu1.16+esm70.41.0-0ubuntu1.16+esm8
 None known
poppler
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
0.57.0-2ubuntu40.57.0-2ubuntu50.62.0-1ubuntu10.62.0-2ubuntu10.62.0-2ubuntu2
Show 21 moreShow less
0.62.0-2ubuntu2.10.62.0-2ubuntu2.20.62.0-2ubuntu2.40.62.0-2ubuntu2.50.62.0-2ubuntu2.60.62.0-2ubuntu2.70.62.0-2ubuntu2.80.62.0-2ubuntu2.90.62.0-2ubuntu2.100.62.0-2ubuntu2.110.62.0-2ubuntu2.120.62.0-2ubuntu2.130.62.0-2ubuntu2.140.62.0-2ubuntu2.14+esm10.62.0-2ubuntu2.14+esm20.62.0-2ubuntu2.14+esm30.62.0-2ubuntu2.14+esm40.62.0-2ubuntu2.14+esm50.62.0-2ubuntu2.14+esm60.62.0-2ubuntu2.14+esm70.62.0-2ubuntu2.14+esm8
 None known
poppler
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
0.80.0-0ubuntu10.80.0-0ubuntu30.80.0-0ubuntu40.80.0-0ubuntu50.85.0-1ubuntu1
Show 12 moreShow less
0.85.0-1ubuntu30.86.1-0ubuntu10.86.1-0ubuntu1.10.86.1-0ubuntu1.20.86.1-0ubuntu1.30.86.1-0ubuntu1.40.86.1-0ubuntu1.50.86.1-0ubuntu1.60.86.1-0ubuntu1.70.86.1-0ubuntu1.7+esm10.86.1-0ubuntu1.7+esm20.86.1-0ubuntu1.7+esm3
 None known
poppler
Ubuntu:22.04:LTS
 before 22.02.0-2ubuntu0.14, plus listed versions
21.06.1-121.11.0-1~ubuntu222.02.0-222.02.0-2ubuntu0.122.02.0-2ubuntu0.2
Show 11 moreShow less
22.02.0-2ubuntu0.322.02.0-2ubuntu0.422.02.0-2ubuntu0.522.02.0-2ubuntu0.622.02.0-2ubuntu0.722.02.0-2ubuntu0.822.02.0-2ubuntu0.922.02.0-2ubuntu0.1022.02.0-2ubuntu0.1122.02.0-2ubuntu0.1222.02.0-2ubuntu0.13
22.02.0-2ubuntu0.14
poppler
Ubuntu:24.04:LTS
 before 24.02.0-1ubuntu9.10, plus listed versions
23.08.0-2ubuntu123.12.0-1ubuntu224.02.0-1ubuntu224.02.0-1ubuntu824.02.0-1ubuntu9
Show 9 moreShow less
24.02.0-1ubuntu9.124.02.0-1ubuntu9.224.02.0-1ubuntu9.324.02.0-1ubuntu9.424.02.0-1ubuntu9.524.02.0-1ubuntu9.624.02.0-1ubuntu9.724.02.0-1ubuntu9.824.02.0-1ubuntu9.9
24.02.0-1ubuntu9.10
poppler
Ubuntu:26.04:LTS
 before 26.01.0-2ubuntu0.2, plus listed versions
25.03.0-1025.03.0-11.126.01.0-2build226.01.0-2ubuntu0.1
26.01.0-2ubuntu0.2
poppler
Ubuntu:22.04:LTS
From an advisory covering 5 CVEs
 before 22.02.0-2ubuntu0.14, plus listed versions
21.06.1-121.11.0-1~ubuntu222.02.0-222.02.0-2ubuntu0.122.02.0-2ubuntu0.2
Show 11 moreShow less
22.02.0-2ubuntu0.322.02.0-2ubuntu0.422.02.0-2ubuntu0.522.02.0-2ubuntu0.622.02.0-2ubuntu0.722.02.0-2ubuntu0.822.02.0-2ubuntu0.922.02.0-2ubuntu0.1022.02.0-2ubuntu0.1122.02.0-2ubuntu0.1222.02.0-2ubuntu0.13
22.02.0-2ubuntu0.14
poppler
Ubuntu:24.04:LTS
From an advisory covering 5 CVEs
 before 24.02.0-1ubuntu9.10, plus listed versions
23.08.0-2ubuntu123.12.0-1ubuntu224.02.0-1ubuntu224.02.0-1ubuntu824.02.0-1ubuntu9
Show 9 moreShow less
24.02.0-1ubuntu9.124.02.0-1ubuntu9.224.02.0-1ubuntu9.324.02.0-1ubuntu9.424.02.0-1ubuntu9.524.02.0-1ubuntu9.624.02.0-1ubuntu9.724.02.0-1ubuntu9.824.02.0-1ubuntu9.9
24.02.0-1ubuntu9.10
poppler
Ubuntu:26.04:LTS
From an advisory covering 5 CVEs
 before 26.01.0-2ubuntu0.2, plus listed versions
25.03.0-1025.03.0-11.126.01.0-2build226.01.0-2ubuntu0.1
26.01.0-2ubuntu0.2
poppler
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 26.09.0-2.1
26.09.0-2.1

History

History
RecordedChangedSources
affected
affected, aliases, facts, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-93314 is a medium vulnerability (CVSS 5.3) in Freedesktop Poppler, published September 18, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. Fixed in poppler 26.07.0-3.

References

Show 37 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open