CVE-2026-93311 Freedesktop Poppler SampledFunction Function.cc integer overflow
Remote attackers can trigger an integer overflow in Poppler's SampledFunction via crafted PDFs, potentially causing denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-93311?
CVE-2026-93311 is a medium-severity vulnerability in Freedesktop Poppler, published on 18 Sep 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component SampledFunction. The manipulation of the argument BitsPerSample results in integer overflow. The attack may be performed from remote. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.
Which versions are affected by CVE-2026-93311?
Linux distribution packages (10)
poppler Red Hat:hummingbird:1 | All versions | 0:26.08.0-1.5.hum1 |
poppler-cpp Red Hat:hummingbird:1 | All versions | 0:26.08.0-1.5.hum1 |
poppler-cpp-devel Red Hat:hummingbird:1 | All versions | 0:26.08.0-1.5.hum1 |
poppler-devel Red Hat:hummingbird:1 | All versions | 0:26.08.0-1.5.hum1 |
poppler-glib Red Hat:hummingbird:1 | All versions | 0:26.08.0-1.5.hum1 |
poppler-glib-devel Red Hat:hummingbird:1 | All versions | 0:26.08.0-1.5.hum1 |
poppler-glib-doc Red Hat:hummingbird:1 | All versions | 0:26.08.0-1.5.hum1 |
poppler-qt6 Red Hat:hummingbird:1 | All versions | 0:26.08.0-1.5.hum1 |
poppler-qt6-devel Red Hat:hummingbird:1 | All versions | 0:26.08.0-1.5.hum1 |
poppler-utils Red Hat:hummingbird:1 | All versions | 0:26.08.0-1.5.hum1 |
How do I fix CVE-2026-93311?
No fix published yet.
Is CVE-2026-93311 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-93311 exists.
Sources
Also known as DEBIAN-CVE-2026-93311, ECHO-aedc-1c09-58f0, GHSA-9p2x-92wc-v6h2, RHSA-2026:82452, UBUNTU-CVE-2026-93311.