CVE-2026-93314 Details
Description
A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of the argument segCnt can lead to integer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. This patch is called ed2a5538cf0a8d3ff908191eda9b73f91a5f952a. It is advisable to implement a patch to correct this issue.
A signed integer overflow vulnerability has been identified in Freedesktop Poppler version 26.07.0. The issue arises in the function 'FoFiTrueType::mapCodeToGID' within 'fofi/FoFiTrueType.cc'. The vulnerability can be exploited remotely by manipulating the 'segCnt' argument, leading to an integer overflow. This overflow allows for out-of-bounds memory access, potentially causing memory corruption or a crash.
Users are advised to upgrade to Poppler version 26.08.0 or later, where this vulnerability has been fixed. The issue was addressed by improving the validation of the 'segCnt' value before it is used in calculations, preventing the integer overflow from occurring.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 18, 2026CISA-ADP
Assessed Sep 22, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/r1ck9-2q/cve_summit/blob/main/Signed-integer-overflow-in-FoFiTrueType-mapCodeToGID-FoFiTrueType.cc-608.md | [email protected] | ExploitRemedyTechnical Analysis |
| https://gitlab.freedesktop.org/poppler/poppler/-/commit/ed2a5538cf0a8d3ff908191eda9b73f91a5f952a?merge_request_iid=2315 | [email protected] | |
| https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2315 | [email protected] | Issue TrackingVendor |
| https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1761 | [email protected] | Issue TrackingTechnical DescriptionVendor |
| https://vuldb.com/cve/CVE-2026-93314 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/submit/942347 | [email protected] | Issue TrackingPermission Required |
| https://vuldb.com/vuln/406613 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/vuln/406613/cti | [email protected] | Content Wall |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-189 | Numeric Errors | [email protected] |
| CWE-190 | Integer Overflow or Wraparound | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Freedesktop Poppler | 26.07.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 22, 2026 | CVE Modified | CISA-ADP |
| Sep 18, 2026 | New CVE Received | [email protected] |