CVE-2026-93314
Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflow
- State
- Published
- Severity
- 5.3 Medium
- Published
- Sep 18, 2026
- Updated
- Sep 22, 2026
- Reserved
- Sep 17, 2026
Description
A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of the argument segCnt can lead to integer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. This patch is called ed2a5538cf0a8d3ff908191eda9b73f91a5f952a. It is advisable to implement a patch to correct this issue.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 6.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C | VulDB |
| 3.0 | 6.3 Medium | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C | VulDB |
| 2.0 | 7.5 High | AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
PopplerFreedesktop |
|
References
- VDB-406613 | Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflowvdb-entrytechnical-description
- VDB-406613 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- CVE-2026-93314 | CVE Analysis and Reportthird-party-advisory
- Submit #942347 | freedesktop.org Poppler 26.07.0 Integer Overflowthird-party-advisory
- https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1761related
- https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2315patch
- https://github.com/r1ck9-2q/cve_summit/blob/main/Signed-integer-overflow-in-FoFiTrueType-mapCodeToGID-FoFiTrueType.cc-608.mdexploit
- https://gitlab.freedesktop.org/poppler/poppler/-/commit/ed2a5538cf0a8d3ff908191eda9b73f91a5f952a?merge_request_iid=2315patch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.