CVE-2026-93311 is an integer overflow vulnerability in the SampledFunction component of Freedesktop Poppler 26.07.0, specifically in the SampledFunction::SampledFunction function within poppler/Function.cc. The issue arises from improper handling of the BitsPerSample argument, allowing an attacker to trigger an integer overflow remotely. Exploit code is publicly available, increasing the risk of exploitation. Despite early notification, the Poppler project has not released a patch or official response at the time of this report. The vulnerability affects numerous Ubuntu package versions of Poppler as enumerated.

The vulnerability allows remote attackers to cause an integer overflow, potentially leading to denial of service or other impacts on availability. There is no indication of confidentiality or integrity compromise based on the CVSS vector and description. Public exploit code exists, which may increase the likelihood of exploitation in the wild.

No official fix or patch has been released by the Poppler project yet. Users should monitor vendor advisories for updates. Until a patch is available, consider limiting exposure to untrusted PDF files processed by affected Poppler versions. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.