CVE-2026-93313
Freedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflow
CVSS Score
6.3
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTableSeg of the file poppler/JBIG2Stream.cc. Performing a manipulation results in integer overflow. The attack can be initiated remotely. The exploit has been made public and could be used. The patch is named eb87cf711563894649bd0c365baa479401dc6d51. To fix this issue, it is recommended to deploy a patch.
| CWE | CWE-190 CWE-189 |
| Vendor | freedesktop |
| Product | poppler |
| Published | Sep 18, 2026 |
Stay Ahead of the Next One
Get instant alerts for freedesktop poppler
Be the first to know when new medium vulnerabilities affecting freedesktop poppler are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Freedesktop / Poppler
26.07.0
References
vuldb.com: https://vuldb.com/vuln/406612 vuldb.com: https://vuldb.com/vuln/406612/cti vuldb.com: https://vuldb.com/cve/CVE-2026-93313 vuldb.com: https://vuldb.com/submit/942346 gitlab.freedesktop.org: https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1760 gitlab.freedesktop.org: https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2322 github.com: https://github.com/r1ck9-2q/cve_summit/blob/main/Signed-integer-overflow-in-JBIG2Stream-readCodeTableSeg-JBIG2Stream.cc-4118.md gitlab.freedesktop.org: https://gitlab.freedesktop.org/poppler/poppler/-/commit/eb87cf711563894649bd0c365baa479401dc6d51?merge_request_iid=2322
Credits
🔍 r1ck99 (VulDB User)