CVE-2026-93311: Freedesktop Poppler SampledFunction Function.cc integer overflow
A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component SampledFunction. The manipulation of the argument BitsPerSample results in integer overflow. The attack may be performed from remote. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What would an attacker need to do to trigger this issue?
The vulnerable code is reached by manipulating the BitsPerSample argument processed by SampledFunction::SampledFunction. The issue is remotely reachable and requires user interaction, while the supplied vector indicates no attacker privileges are required.
Is exploit code available?
Yes. The available information states that a public exploit exists and may be used.
What is the likely security impact?
The provided severity vector rates the issue as medium with a 4.3 score and indicates low availability impact. It indicates no confidentiality or integrity impact.
Is a vendor fix or response reported?
No response from the project is reported. The issue was reportedly submitted through a bug report, but the project had not responded at the time of publication.