rootpwn

high · CVSS v3 6.3 · CVSS v4 5.3

CVE-2026-93313

An integer overflow vulnerability exists in Freedesktop Poppler version 26.07.0 within the JBIG2Stream::readCodeTableSeg function in poppler

Overview

An integer overflow vulnerability exists in Freedesktop Poppler version 26.07.0 within the JBIG2Stream::readCodeTableSeg function in poppler/JBIG2Stream.cc. This flaw can be triggered remotely via malicious PDF files containing crafted JBIG2 streams. It matters because successful exploitation could lead to application crashes or potentially arbitrary code execution in environments processing untrusted documents.

Description

A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTableSeg of the file poppler/JBIG2Stream.cc. Performing a manipulation results in integer overflow. The attack can be initiated remotely. The exploit has been made public and could be used. The patch is named eb87cf711563894649bd0c365baa479401dc6d51. To fix this issue, it is recommended to deploy a patch.

Impact

This vulnerability primarily impacts systems, applications, and services that utilize the Poppler PDF rendering library to process untrusted documents. The integrity and availability of the affected host process are at risk, with potential confidentiality impacts if memory corruption leads to code execution. Users and administrators operating software with embedded Poppler components are vulnerable.

Remediation

Apply the official vendor patch referenced by commit eb87cf711563894649bd0c365baa479401dc6d51. Upgrade Poppler to a secure version containing the fix for the JBIG2Stream integer overflow. As a defense-in-depth measure, isolate PDF rendering workloads within sandboxed environments with restricted privileges.

Risk context

The vulnerability is rated as high severity with a CVSS v3 score of 6.3 and CVSS v4 score of 5.3. Because public exploit details are available, defenders should treat this issue with elevated urgency, prioritizing patching for systems handling untrusted PDF content.

Affected products

  • Freedesktop Poppler 26.07.0

Scores

Severity
high
CVSS v2
7.5
CVSS v3
6.3
CVSS v4
5.3
EPSS
—

integer-overflow poppler pdf jbig2 remote-execution freedesktop

← All CVEs

Related CVEs

high

CVE-2026-93455

django-page-cms through version 2.0.13 contains an authorization bypass vulnerability in its admin helper views. The flaw allows low-privilege staff accounts to read unpublished drafts, page listings, and stored media paths without proper permission validation. This matters because it exposes sensitive organizational content to internal users who should not have access.

View analysis

high

CVE-2026-52727

The lxc-ci project inadvertently included a static pacman local-signing private key within Arch Linux container and virtual machine images built prior to May 28, 2026. This allows a malicious or compromised package mirror to issue cryptographically trusted packages to clients. Consequently, attackers can achieve arbitrary code execution as root on affected systems.

View analysis

high

CVE-2026-77169

A authorization bypass vulnerability exists in the team folders app when used alongside the workspace app. This flaw allows API-only delegated administrators to circumvent folder-level access restrictions. It matters because it undermines multi-tenant isolation and administrative privilege boundaries.

View analysis

high

CVE-2026-93314

Poppler 26.07.0 contains a remote integer overflow in FoFiTrueType::mapCodeToGID triggered by a crafted segCnt value, potentially leading to memory corruption or crashes. The flaw can be exploited over the network without local access. It is publicly disclosed and may be used by attackers.

View analysis