Description
A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component SampledFunction. The manipulation of the argument BitsPerSample results in integer overflow. The attack may be performed from remote. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.
Published: 2026-09-18
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Remote Integer Overflow
Action: Apply Patch
AI Analysis

Impact

A flaw in Poppler’s SampledFunction::SampledFunction routine in poppler/Function.cc lets an attacker manipulate the BitsPerSample argument to cause an integer overflow. The overflow is triggered by a crafted PDF, and the exploit is publicly available, indicating that remote exploitation is possible.*The vulnerability is a classic integer overflow (CWE-189/190).*

Affected Systems

The vulnerability affects Freedesktop Poppler version 26.07.0. No other affected product versions are listed in the data.

Risk and Exploitability

The CVSS score of 5.3 indicates a moderate severity. The EPSS score of less than 1% suggests a low probability of exploitation at the time of analysis. The flaw is not listed in the CISA KEV catalog. The attack vector is remote and the exploit is publicly available, meaning that a system using Poppler 26.07.0 to process a malicious PDF that contains a crafted SampledFunction could be exposed if the vulnerability is exercised.

Generated by OpenCVE AI on September 19, 2026 at 21:08 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Check for and install the latest Poppler release that includes the fix as soon as it becomes available.
  • If no patch is available, limit processing to PDFs that do not contain SampledFunction objects or configure the parser to ignore SampledFunction features where possible.
  • If the issue cannot be mitigated, consider switching to an alternative PDF rendering library that does not expose this vulnerability.

Generated by OpenCVE AI on September 19, 2026 at 21:08 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 23 Sep 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 23 Sep 2026 12:30:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Moderate

Fri, 18 Sep 2026 01:15:00 +0000

Type Values Removed Values Added
Description A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component SampledFunction. The manipulation of the argument BitsPerSample results in integer overflow. The attack may be performed from remote. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.
Title Freedesktop Poppler SampledFunction Function.cc integer overflow
First Time appeared Freedesktop
Freedesktop poppler
Weaknesses CWE-189
CWE-190
CPEs cpe:2.3:a:freedesktop:poppler:*:*:*:*:*:*:*:*
Vendors & Products Freedesktop
Freedesktop poppler
References
Metrics cvssV2_0

{'score': 5, 'vector': 'AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 4.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Freedesktop Poppler
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-09-22T15:44:44.585Z

Reserved: 2026-09-17T17:13:04.171Z

Link: CVE-2026-93311

cve-icon Vulnrichment

Updated: 2026-09-22T15:34:06.685Z

cve-icon NVD

Status : Deferred

Published: 2026-09-18T01:16:56.533

Modified: 2026-09-22T16:18:13.033

Link: CVE-2026-93311

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-09-18T00:30:07Z

Links: CVE-2026-93311 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-09-19T21:15:06Z

Weaknesses