CVE-2026-93313— Freedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflow
Quick assessment
Affected
Freedesktop Poppler
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTableSeg of the file poppler/JBIG2Stream.cc. Performing a manipulation results in integer overflow. The attack can be initiated remotely. The ex
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-93313
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Freedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflow
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTableSeg of the file poppler/JBIG2Stream.cc. Performing a manipulation results in integer overflow. The attack can be initiated remotely. The exploit has been made public and could be used. The patch is named eb87cf711563894649bd0c365baa479401dc6d51. To fix this issue, it is recommended to deploy a patch.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
整数溢出或超界折返
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Freedesktop | Poppler | 26.07.0 |
cpe:2.3:a:freedesktop:poppler:*:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-93313
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-93313
请登录查看更多情报信息。
Other References for CVE-2026-93313 (5)
-
Sign in · GitLab related
-
Sign in · GitLab patch
-
VulDB | Security Check third-party-advisory
Same Patch Batch · Freedesktop · 2026-09-18 · 4 CVEs total
| CVE-2026-93314 | 6.3 MEDIUM | Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflow |
| CVE-2026-93311 | 4.3 MEDIUM | Freedesktop Poppler SampledFunction Function.cc integer overflow |
| CVE-2026-93312 | 4.3 MEDIUM | Freedesktop Poppler JBIG2Stream.cc rewind null pointer dereference |
IV. Related Vulnerabilities
Same product: Poppler
-
CVE-2026-93314
Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer ove -
CVE-2026-93312
Freedesktop Poppler JBIG2Stream.cc rewind null pointer deref -
CVE-2026-93311
Freedesktop Poppler SampledFunction Function.cc integer over -
CVE-2025-52885
GHSL-2025-042: Poppler has Use-After-Free -
CVE-2025-43718
Poppler 安全漏洞
Same vendor: Freedesktop
Same weakness: CWE-190
-
CVE-2026-40531
Synology DSM文件操作整数溢出DoS漏洞 -
CVE-2026-93314
Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer ove -
CVE-2026-93311
Freedesktop Poppler SampledFunction Function.cc integer over -
CVE-2026-54571
ESPAsyncWebServer: Integer overflow in multipart boundary pa -
CVE-2026-25290
Integer Overflow or Wraparound in OOBM
V. Comments for CVE-2026-93313
No comments yet