The vulnerability CVE-2026-93311 exists in Freedesktop Poppler 26.07.0 within the SampledFunction::SampledFunction function. The issue arises from improper handling of the BitsPerSample argument, leading to an integer overflow condition. This flaw can be triggered remotely, and exploit code has been publicly disclosed. The vendor has not provided a patch or official response at the time of this report.

Successful exploitation of this integer overflow could potentially lead to unexpected behavior or memory corruption in Poppler when processing crafted inputs. The CVSS 4.0 score of 5.3 (medium severity) reflects the moderate risk due to remote attack vector, low complexity, no privileges required, and limited impact scope. No confirmed in-the-wild exploitation is reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch has been released by the vendor, users should monitor for updates from Freedesktop Poppler and consider applying any available workarounds or input filtering to mitigate risk until a fix is available.