A vulnerability was found in Freedesktop Poppler 26.07.0. (CVE-2026-93313)
A medium severity integer overflow vulnerability exists in the JBIG2Stream::readCodeTableSeg function of Freedesktop Poppler 26.07.0. This flaw can be triggered remotely and may lead to impacts on confidentiality, integrity, and availability. An exploit has been publicly disclosed. A patch identified by commit eb87cf711563894649bd0c365baa479401dc6d51 is available and recommended for deployment.
AI Analysis
Technical Summary
CVE-2026-93313 is an integer overflow vulnerability in the JBIG2Stream::readCodeTableSeg function within the poppler/JBIG2Stream.cc source file of Freedesktop Poppler version 26.07.0. The vulnerability can be triggered remotely by manipulating input to cause an integer overflow. Exploit code has been made public. A patch has been created (commit eb87cf711563894649bd0c365baa479401dc6d51) to address this issue.
Potential Impact
Successful exploitation of this vulnerability could result in impacts to confidentiality, integrity, and availability of systems using the affected Poppler versions. The CVSS 3.1 base score is 6.3 (medium severity), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and partial impacts on confidentiality, integrity, and availability.
Mitigation Recommendations
A patch is available for this vulnerability (commit eb87cf711563894649bd0c365baa479401dc6d51). It is recommended to deploy the patch to remediate the issue. No vendor advisory content contradicts this recommendation.
A vulnerability was found in Freedesktop Poppler 26.07.0. (CVE-2026-93313)
Description
A medium severity integer overflow vulnerability exists in the JBIG2Stream::readCodeTableSeg function of Freedesktop Poppler 26.07.0. This flaw can be triggered remotely and may lead to impacts on confidentiality, integrity, and availability. An exploit has been publicly disclosed. A patch identified by commit eb87cf711563894649bd0c365baa479401dc6d51 is available and recommended for deployment.
CVSS v3.1
Score 6.3medium
Affected software
pkg:deb/ubuntu/poppler?arch=source&distro=esm-infra/xenialpkg:deb/ubuntu/poppler?arch=source&distro=esm-infra/bionicpkg:deb/ubuntu/poppler?arch=source&distro=esm-infra/focalpkg:deb/ubuntu/poppler?arch=source&distro=jammypkg:deb/ubuntu/poppler?arch=source&distro=noblepkg:deb/ubuntu/poppler?arch=source&distro=resoluteRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-93313 is an integer overflow vulnerability in the JBIG2Stream::readCodeTableSeg function within the poppler/JBIG2Stream.cc source file of Freedesktop Poppler version 26.07.0. The vulnerability can be triggered remotely by manipulating input to cause an integer overflow. Exploit code has been made public. A patch has been created (commit eb87cf711563894649bd0c365baa479401dc6d51) to address this issue.
Potential Impact
Successful exploitation of this vulnerability could result in impacts to confidentiality, integrity, and availability of systems using the affected Poppler versions. The CVSS 3.1 base score is 6.3 (medium severity), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and partial impacts on confidentiality, integrity, and availability.
Mitigation Recommendations
A patch is available for this vulnerability (commit eb87cf711563894649bd0c365baa479401dc6d51). It is recommended to deploy the patch to remediate the issue. No vendor advisory content contradicts this recommendation.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- UBUNTU-CVE-2026-93313
- Osv Schema Version
- 1.7.0
- Ecosystems
- ["Ubuntu:Pro:16.04:LTS","Ubuntu:Pro:18.04:LTS","Ubuntu:Pro:20.04:LTS","Ubuntu:22.04:LTS","Ubuntu:24.04:LTS","Ubuntu:26.04:LTS"]
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ab4be2ff7a7c54106eeec35
Added to database: 09/24/2026, 06:07:43 UTC
Last enriched: 09/24/2026, 06:32:18 UTC
Last updated: 09/25/2026, 04:47:34 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.