CVE-2026-93311

MEDIUM 4.3

Freedesktop Poppler SampledFunction Function.cc integer overflow

CVSS Score

4.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component SampledFunction. The manipulation of the argument BitsPerSample results in integer overflow. The attack may be performed from remote. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

CWE	CWE-190 CWE-189
Vendor	freedesktop
Product	poppler
Published	Sep 18, 2026

Stay Ahead of the Next One

Get instant alerts for freedesktop poppler

Be the first to know when new medium vulnerabilities affecting freedesktop poppler are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

Freedesktop / Poppler

26.07.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/406609 vuldb.com: https://vuldb.com/vuln/406609/cti vuldb.com: https://vuldb.com/cve/CVE-2026-93311 vuldb.com: https://vuldb.com/submit/942344 gitlab.freedesktop.org: https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1758 github.com: https://github.com/r1ck9-2q/cve_summit/blob/main/Shift-exponent-undefined-behavior-in-SampledFunction-Function.cc-376.md

Credits

🔍 r1ck99 (VulDB User) VulDB CNA Team