Poppler 26.07 Remote Integer Overflow in SampledFunction
CVE-2026-93311 Published on September 18, 2026
Freedesktop Poppler SampledFunction Function.cc integer overflow
A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component SampledFunction. The manipulation of the argument BitsPerSample results in integer overflow. The attack may be performed from remote. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.
Timeline
Advisory disclosed
VulDB entry created
VulDB entry last update
Weakness Types
Integer Overflow or Wraparound
The software performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control. An integer overflow or wraparound occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may wrap to become a very small or negative number. While this may be intended behavior in circumstances that rely on wrapping, it can have security consequences if the wrap is unexpected. This is especially the case if the integer overflow can be triggered using user-supplied inputs. This becomes security-critical when the result is used to control looping, make a security decision, or determine the offset or size in behaviors such as memory allocation, copying, concatenation, etc.
Numeric Errors
Weaknesses in this category are related to improper calculation or conversion of numbers.
Products Associated with CVE-2026-93311
Want to know whenever a new CVE is published for FreeDesktop Poppler? stack.watch will email you.
