CVE-2026-93313
Public on 2026-09-18
Modified on 2026-09-18
Description
A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTableSeg of the file poppler/JBIG2Stream.cc. Performing a manipulation results in integer overflow. The attack can be initiated remotely. The exploit has been made public and could be used. The patch is named eb87cf711563894649bd0c365baa479401dc6d51. To fix this issue, it is recommended to deploy a patch.
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| Amazon Linux 2 - Core | compat-poppler022 | Pending Fix | ||
| Amazon Linux 2023 | compat-poppler22 | Pending Fix | ||
| Amazon Linux 2027 Preview | compat-poppler22 | Pending Fix | ||
| Amazon Linux 2 - Core | poppler | Pending Fix | ||
| Amazon Linux 2023 | poppler | Pending Fix | ||
| Amazon Linux 2027 Preview | poppler | Pending Fix | ||
| Amazon Linux 2 - Core | poppler-data | Not Affected | ||
| Amazon Linux 2023 | poppler-data | Not Affected | ||
| Amazon Linux 2027 Preview | poppler-data | Not Affected |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| Amazon Linux | CVSSv3 | 3.3 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L |