{"id":"CVE-2026-102620","aliases":["DEBIAN-CVE-2026-102620","EUVD-2026-89455","GHSA-j552-4gqh-7xmg","RHSA-2026:74469","SUSE-SU-2026:5133-1","SUSE-SU-2026:5175-1","SUSE-SU-2026:5176-1","UBUNTU-CVE-2026-102620","USN-8894-1","openSUSE-SU-2026:11968-1"],"status":"published","title":"Freedesktop Poppler FoFiTrueType.cc cvtSfnts integer overflow","description":"A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 245d3c6823377755f2c1d5fdddd010279c6ed94d. It is suggested to install a patch to address this issue.","severity":{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00115,"percentile":0.01581,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-189","CWE-190"],"published":"2026-09-29T20:30:15Z","modified":"2026-11-11T13:00:04Z","fixes":[{"ecosystem":"Debian:14","package":"poppler","fixed_in":["26.07.0-3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"poppler","fixed_in":["22.02.0-2ubuntu0.14"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"poppler","fixed_in":["24.02.0-1ubuntu9.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"poppler","fixed_in":["26.01.0-2ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["22.12.0-2","22.12.0-2+deb12u1","22.12.0-2+deb12u2","22.12.0-2+deb12u3","22.12.0-2.1","22.12.0-2.2","23.08.0-1","23.08.0-2","23.12.0-1","24.02.0-1","24.02.0-2","24.02.0-3","24.02.0-4","24.02.0-5","24.02.0-5+loong64","24.06.0-1","24.06.0-2","24.08.0-1","24.08.0-2","24.08.0-3","24.08.0-4","25.01.0-1","25.01.0-2","25.01.0-3","25.01.0-4","25.01.0-5","25.03.0-1","25.03.0-10","25.03.0-11","25.03.0-11.1","25.03.0-2","25.03.0-3","25.03.0-4","25.03.0-5","25.03.0-6","25.03.0-7","25.03.0-9","26.01.0-1","26.01.0-2","26.01.0-3","26.01.0-4","26.01.0-4.1","26.01.0-5","26.07.0-1","26.07.0-2","26.07.0-3"]},{"source":"osv","ecosystem":"Debian:13","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["25.03.0-10","25.03.0-11","25.03.0-11.1","25.03.0-5","25.03.0-5+deb13u2","25.03.0-5+deb13u3","25.03.0-5+deb13u4","25.03.0-6","25.03.0-7","25.03.0-9","26.01.0-1","26.01.0-2","26.01.0-3","26.01.0-4","26.01.0-4.1","26.01.0-5","26.07.0-1","26.07.0-2","26.07.0-3"]},{"source":"osv","ecosystem":"Debian:14","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.07.0-3"}]}],"versions":["25.03.0-10","25.03.0-11","25.03.0-11.1","25.03.0-5","25.03.0-6","25.03.0-7","25.03.0-9","26.01.0-1","26.01.0-2","26.01.0-3","26.01.0-4","26.01.0-4.1","26.01.0-5","26.07.0-1","26.07.0-2"]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.08.0-1.2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"poppler-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.08.0-1.2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"poppler-cpp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.08.0-1.2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"poppler-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.08.0-1.2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"poppler-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.08.0-1.2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"poppler-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.08.0-1.2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"poppler-glib-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.08.0-1.2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"poppler-qt6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.08.0-1.2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"poppler-qt6-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.08.0-1.2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"poppler-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:26.08.0-1.2.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.03.0-150600.3.34.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.03.0-150600.3.34.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"poppler-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.03.0-150600.3.34.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"poppler-qt6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.03.0-150600.3.34.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.77.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"poppler-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.77.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.56.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.33.0-0ubuntu3","0.37.0-0ubuntu1","0.38.0-0ubuntu1","0.41.0-0ubuntu1","0.41.0-0ubuntu1.1","0.41.0-0ubuntu1.2","0.41.0-0ubuntu1.3","0.41.0-0ubuntu1.4","0.41.0-0ubuntu1.5","0.41.0-0ubuntu1.6","0.41.0-0ubuntu1.7","0.41.0-0ubuntu1.8","0.41.0-0ubuntu1.9","0.41.0-0ubuntu1.10","0.41.0-0ubuntu1.11","0.41.0-0ubuntu1.12","0.41.0-0ubuntu1.13","0.41.0-0ubuntu1.14","0.41.0-0ubuntu1.15","0.41.0-0ubuntu1.16","0.41.0-0ubuntu1.16+esm1","0.41.0-0ubuntu1.16+esm2","0.41.0-0ubuntu1.16+esm3","0.41.0-0ubuntu1.16+esm4","0.41.0-0ubuntu1.16+esm5","0.41.0-0ubuntu1.16+esm6","0.41.0-0ubuntu1.16+esm7","0.41.0-0ubuntu1.16+esm8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.57.0-2ubuntu4","0.57.0-2ubuntu5","0.62.0-1ubuntu1","0.62.0-2ubuntu1","0.62.0-2ubuntu2","0.62.0-2ubuntu2.1","0.62.0-2ubuntu2.2","0.62.0-2ubuntu2.4","0.62.0-2ubuntu2.5","0.62.0-2ubuntu2.6","0.62.0-2ubuntu2.7","0.62.0-2ubuntu2.8","0.62.0-2ubuntu2.9","0.62.0-2ubuntu2.10","0.62.0-2ubuntu2.11","0.62.0-2ubuntu2.12","0.62.0-2ubuntu2.13","0.62.0-2ubuntu2.14","0.62.0-2ubuntu2.14+esm1","0.62.0-2ubuntu2.14+esm2","0.62.0-2ubuntu2.14+esm3","0.62.0-2ubuntu2.14+esm4","0.62.0-2ubuntu2.14+esm5","0.62.0-2ubuntu2.14+esm6","0.62.0-2ubuntu2.14+esm7","0.62.0-2ubuntu2.14+esm8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.80.0-0ubuntu1","0.80.0-0ubuntu3","0.80.0-0ubuntu4","0.80.0-0ubuntu5","0.85.0-1ubuntu1","0.85.0-1ubuntu3","0.86.1-0ubuntu1","0.86.1-0ubuntu1.1","0.86.1-0ubuntu1.2","0.86.1-0ubuntu1.3","0.86.1-0ubuntu1.4","0.86.1-0ubuntu1.5","0.86.1-0ubuntu1.6","0.86.1-0ubuntu1.7","0.86.1-0ubuntu1.7+esm1","0.86.1-0ubuntu1.7+esm2","0.86.1-0ubuntu1.7+esm3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.02.0-2ubuntu0.14"}]}],"versions":["21.06.1-1","21.11.0-1~ubuntu2","22.02.0-2","22.02.0-2ubuntu0.1","22.02.0-2ubuntu0.2","22.02.0-2ubuntu0.3","22.02.0-2ubuntu0.4","22.02.0-2ubuntu0.5","22.02.0-2ubuntu0.6","22.02.0-2ubuntu0.7","22.02.0-2ubuntu0.8","22.02.0-2ubuntu0.9","22.02.0-2ubuntu0.10","22.02.0-2ubuntu0.11","22.02.0-2ubuntu0.12","22.02.0-2ubuntu0.13"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.02.0-1ubuntu9.10"}]}],"versions":["23.08.0-2ubuntu1","23.12.0-1ubuntu2","24.02.0-1ubuntu2","24.02.0-1ubuntu8","24.02.0-1ubuntu9","24.02.0-1ubuntu9.1","24.02.0-1ubuntu9.2","24.02.0-1ubuntu9.3","24.02.0-1ubuntu9.4","24.02.0-1ubuntu9.5","24.02.0-1ubuntu9.6","24.02.0-1ubuntu9.7","24.02.0-1ubuntu9.8","24.02.0-1ubuntu9.9"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.01.0-2ubuntu0.2"}]}],"versions":["25.03.0-10","25.03.0-11.1","26.01.0-2build2","26.01.0-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.02.0-2ubuntu0.14"}]}],"versions":["21.06.1-1","21.11.0-1~ubuntu2","22.02.0-2","22.02.0-2ubuntu0.1","22.02.0-2ubuntu0.2","22.02.0-2ubuntu0.3","22.02.0-2ubuntu0.4","22.02.0-2ubuntu0.5","22.02.0-2ubuntu0.6","22.02.0-2ubuntu0.7","22.02.0-2ubuntu0.8","22.02.0-2ubuntu0.9","22.02.0-2ubuntu0.10","22.02.0-2ubuntu0.11","22.02.0-2ubuntu0.12","22.02.0-2ubuntu0.13"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.02.0-1ubuntu9.10"}]}],"versions":["23.08.0-2ubuntu1","23.12.0-1ubuntu2","24.02.0-1ubuntu2","24.02.0-1ubuntu8","24.02.0-1ubuntu9","24.02.0-1ubuntu9.1","24.02.0-1ubuntu9.2","24.02.0-1ubuntu9.3","24.02.0-1ubuntu9.4","24.02.0-1ubuntu9.5","24.02.0-1ubuntu9.6","24.02.0-1ubuntu9.7","24.02.0-1ubuntu9.8","24.02.0-1ubuntu9.9"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.01.0-2ubuntu0.2"}]}],"versions":["25.03.0-10","25.03.0-11.1","26.01.0-2build2","26.01.0-2ubuntu0.1"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.09.0-3.1"}]}],"bundled":2}],"products":[{"vendor":"freedesktop","product":"poppler"},{"vendor":"poppler","product":"poppler"}],"references":[{"url":"https://vuldb.com/vuln/411410","tags":["vdb-entry","technical-description","advisory","article","report"]},{"url":"https://vuldb.com/vuln/411410/cti","tags":["signature","permissions-required","report","article"]},{"url":"https://vuldb.com/cve/CVE-2026-102620","tags":["third-party-advisory","advisory","article","report"]},{"url":"https://vuldb.com/submit/942348","tags":["third-party-advisory","advisory","article","report"]},{"url":"https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1762","tags":["related","web","article"]},{"url":"https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2326","tags":["patch","fix","article","report"]},{"url":"https://github.com/r1ck9-2q/cve_summit/blob/main/Signed-integer-overflow-in-FoFiTrueType-cvtSfnts-FoFiTrueType.cc-1210.md","tags":["exploit","evidence","article","report"]},{"url":"https://gitlab.freedesktop.org/poppler/poppler/-/commit/245d3c6823377755f2c1d5fdddd010279c6ed94d","tags":["patch","fix","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102620","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-j552-4gqh-7xmg"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102620.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-102620","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:74469","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-102620","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-102621","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74469.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2543645","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-102620","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2543683","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-102621","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102621","tags":["advisory"]},{"url":"https://github.com/r1ck9-2q/cve_summit/blob/main/Signed-integer-overflow-in-SplashClip-clipToPath-SplashClip.cc-214.md","tags":["article"]},{"url":"https://gitlab.freedesktop.org/poppler/poppler/-/commit/323c91036d99926a8b90dc14329f7b40aece22f8","tags":["article"]},{"url":"https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2325","tags":["article"]},{"url":"https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1763","tags":["article"]},{"url":"https://vuldb.com/cve/CVE-2026-102621","tags":["article"]},{"url":"https://vuldb.com/submit/942349","tags":["article"]},{"url":"https://vuldb.com/vuln/411411","tags":["article"]},{"url":"https://vuldb.com/vuln/411411/cti","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20265133-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1282531","tags":["report"]},{"url":"https://bugzilla.suse.com/1282532","tags":["report"]},{"url":"https://bugzilla.suse.com/1283330","tags":["report"]},{"url":"https://bugzilla.suse.com/1283331","tags":["report"]},{"url":"https://bugzilla.suse.com/1284844","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-102620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-102621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-107705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93314","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20265175-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20265176-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-102620","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8894-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-93312","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93313","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-93314","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-102621","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-102620","title":"Freedesktop Poppler FoFiTrueType.cc cvtSfnts integer overflow","description":"A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 245d3c6823377755f2c1d5fdddd010279c6ed94d. It is suggested to install a patch to address this issue.","status":"published","published":"2026-09-29T20:30:15.183Z","modified":"2026-10-02T12:26:30.155Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P","level":"medium","assessor":"cna"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C","level":"low","assessor":"cna"},{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C","level":"low","assessor":"cna"},{"version":"2.0","score":1.7,"vector":"AV:L/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:OF/RC:C","assessor":"cna"}],"cwes":["CWE-190","CWE-189"],"updated_at":"2026-11-02T13:38:54.394896Z"}],"euvd":[{"id":"EUVD-2026-89455","description":"A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 245d3c6823377755f2c1d5fdddd010279c6ed94d. It is suggested to install a patch to address this issue.","status":"published","published":"2026-09-29T20:30:15Z","modified":"2026-10-02T12:26:30Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P","level":"medium"}],"updated_at":"2026-11-02T17:27:43.134956Z"}],"ghsa":[{"id":"GHSA-j552-4gqh-7xmg","title":"A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the...","description":"A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 245d3c6823377755f2c1d5fdddd010279c6ed94d. It is suggested to install a patch to address this issue.","status":"published","published":"2026-09-29T21:33:27Z","modified":"2026-09-29T21:33:36Z","cvss":[{"version":"4.0","score":1.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:12:34.453857Z"}],"nvd":[{"id":"CVE-2026-102620","description":"A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 245d3c6823377755f2c1d5fdddd010279c6ed94d. It is suggested to install a patch to address this issue.","status":"published","published":"2026-09-29T21:17:18.087Z","modified":"2026-10-02T13:17:16.54Z","cvss":[{"version":"4.0","score":1.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low","assessor":"secondary"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"},{"version":"2.0","score":1.7,"vector":"AV:L/AC:L/Au:S/C:N/I:P/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-189","CWE-190"],"updated_at":"2026-11-02T14:12:52.759595Z"}],"osv":[{"id":"CVE-2026-102620","title":"Freedesktop Poppler FoFiTrueType.cc cvtSfnts integer overflow","description":"A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 245d3c6823377755f2c1d5fdddd010279c6ed94d. It is suggested to install a patch to address this issue.","status":"published","published":"2026-09-29T20:30:15.183Z","modified":"2026-11-11T13:12:17.277763702Z","cvss":[{"version":"4.0","score":1.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P","level":"low"}],"cwes":["CWE-189","CWE-190"],"updated_at":"2026-11-10T14:01:15.865179Z"},{"id":"DEBIAN-CVE-2026-102620","description":"A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 245d3c6823377755f2c1d5fdddd010279c6ed94d. It is suggested to install a patch to address this issue.","status":"published","published":"2026-09-29T21:17:18.087Z","modified":"2026-10-12T11:00:17.607410472Z","cvss":[{"version":"4.0","score":1.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low"}],"updated_at":"2026-11-02T15:45:48.903138Z"},{"id":"RHSA-2026:74469","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-10-02T10:25:54Z","modified":"2026-10-02T10:32:34.136483317Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"UBUNTU-CVE-2026-102620","description":"A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 245d3c6823377755f2c1d5fdddd010279c6ed94d. It is suggested to install a patch to address this issue.","status":"published","published":"2026-09-29T21:17:00Z","modified":"2026-10-08T12:53:36.704738355Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"},{"version":"4.0","score":1.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P","level":"low"}],"updated_at":"2026-11-02T16:55:58.519486Z"},{"id":"openSUSE-SU-2026:11968-1","title":"libpoppler-cpp3-26.09.0-3.1 on GA media","description":"These are all security issues fixed in the libpoppler-cpp3-26.09.0-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-02T00:00:00Z","modified":"2026-10-03T17:23:10.026817564Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"SUSE-SU-2026:5133-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n- CVE-2026-93313: JBIG2 stream processing can cause integer overflows (bsc#1282532).\n- CVE-2026-93314: TrueType font processing can cause integer overflows (bsc#1282531).\n- CVE-2026-102620: Data corruption via integer overflow in FoFiTrueType:cvtSfnts (bsc#1283330).\n- CVE-2026-102621: Denial of Service via integer overflow in SplashClip (bsc#1283331).\n- CVE-2026-107705: Denial of Service via stack-based buffer overflow in PDF decryption (bsc#1284844).\n","status":"published","published":"2026-11-09T12:51:43Z","modified":"2026-11-10T13:15:10.65070718Z","updated_at":"2026-11-10T13:29:51.103746Z"},{"id":"SUSE-SU-2026:5175-1","title":"Security update for poppler, poppler-qt, poppler-qt5","description":"This update for poppler, poppler-qt, poppler-qt5 fixes the following issues:\n\n- CVE-2026-93313: JBIG2 stream processing can cause integer overflows (bsc#1282532).\n- CVE-2026-93314: TrueType font processing can cause integer overflows (bsc#1282531).\n- CVE-2026-102620: Data corruption via integer overflow in FoFiTrueType:cvtSfnts (bsc#1283330).\n- CVE-2026-102621: Denial of Service via integer overflow in SplashClip (bsc#1283331).\n- CVE-2026-107705: Denial of Service via stack-based buffer overflow in PDF decryption (bsc#1284844).\n","status":"published","published":"2026-11-10T17:33:28Z","modified":"2026-11-11T13:00:04.926927498Z","updated_at":"2026-11-11T13:08:46.301371Z"},{"id":"SUSE-SU-2026:5176-1","title":"Security update for poppler, poppler-qt5","description":"This update for poppler, poppler-qt5 fixes the following issues:\n\n- CVE-2026-93313: JBIG2 stream processing can cause integer overflows (bsc#1282532).\n- CVE-2026-93314: TrueType font processing can cause integer overflows (bsc#1282531).\n- CVE-2026-102620: Data corruption via integer overflow in FoFiTrueType:cvtSfnts (bsc#1283330).\n- CVE-2026-102621: Denial of Service via integer overflow in SplashClip (bsc#1283331).\n- CVE-2026-107705: Denial of Service via stack-based buffer overflow in PDF decryption (bsc#1284844).\n","status":"published","published":"2026-11-10T17:33:50Z","modified":"2026-11-11T13:00:04.927628924Z","updated_at":"2026-11-11T13:08:46.301371Z"},{"id":"USN-8894-1","title":"poppler vulnerabilities","description":"It was discovered that Poppler had an integer overflow in\nFoFiTrueType::cvtSfnts. An attacker could possibly use this issue to\ncause Poppler to crash, resulting in a denial of service, or execute\narbitrary code.\n(CVE-2026-102620)\n\nIt was discovered that Poppler had an integer overflow in\nSplashClip::clipToPath. An attacker could possibly use this issue to\ncause Poppler to crash, resulting in a denial of service, or execute\narbitrary code.\n(CVE-2026-102621)\n\nIt was discovered that Poppler had a null pointer dereference in\nJBIG2Stream. An attacker could possibly use this issue to cause\nPoppler to crash, resulting in a denial of service.\n(CVE-2026-93312)\n\nIt was discovered that Poppler had an integer overflow in\nJBIG2Stream::readCodeTableSeg. An attacker could possibly use this\nissue to cause Poppler to crash, resulting in a denial of service,\nor execute arbitrary code.\n(CVE-2026-93313)\n\nIt was discovered that Poppler had an integer overflow in\nFoFiTrueType::mapCodeToGID. An attacker could possibly use this\nissue to cause Poppler to crash, resulting in a denial of service,\nor execute arbitrary code.\n(CVE-2026-93314)","status":"published","published":"2026-10-07T13:00:38Z","modified":"2026-10-08T12:58:07.609228365Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}