CVE catalog

CVE-2026-93314

A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of the argument segCnt ca

[CVE catalog]

Severity
Medium · CVSS 6.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.24% · Oct 25, 2026

A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of the argument segCnt can lead to integer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. This patch is called ed2a5538cf0a8d3ff908191eda9b73f91a5f952a. It is advisable to implement a patch to correct this issue.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianpopplersid26.07.0-3fixed
Debianpopplerforky26.07.0-3fixed
Debianpopplertrixie25.03.0-5+deb13u4vulnerable
Debianpopplertrixie-security25.03.0-5+deb13u3vulnerable
Debianpopplerbookworm22.12.0-2+deb12u2vulnerable
Debianpopplerbookworm-security22.12.0-2+deb12u3vulnerable
Ubuntupopplernoble24.02.0-1ubuntu9.10fixed
Ubuntugir1.2-poppler-0.18noble24.02.0-1ubuntu9.10fixed
Ubuntulibpoppler-cpp-devnoble24.02.0-1ubuntu9.10fixed
Ubuntulibpoppler-cpp0t64noble24.02.0-1ubuntu9.10fixed
Ubuntulibpoppler-devnoble24.02.0-1ubuntu9.10fixed
Ubuntulibpoppler-glib-devnoble24.02.0-1ubuntu9.10fixed
Ubuntulibpoppler-glib-docnoble24.02.0-1ubuntu9.10fixed
Ubuntulibpoppler-glib8t64noble24.02.0-1ubuntu9.10fixed
Ubuntulibpoppler-private-devnoble24.02.0-1ubuntu9.10fixed
Ubuntulibpoppler-qt5-1t64noble24.02.0-1ubuntu9.10fixed
Ubuntulibpoppler-qt5-devnoble24.02.0-1ubuntu9.10fixed
Ubuntulibpoppler-qt6-3t64noble24.02.0-1ubuntu9.10fixed
Ubuntulibpoppler-qt6-devnoble24.02.0-1ubuntu9.10fixed
Ubuntulibpoppler134noble24.02.0-1ubuntu9.10fixed
Ubuntupoppler-utilsnoble24.02.0-1ubuntu9.10fixed
Ubuntupopplerpro0.80.0-0ubuntu1vulnerable
Ubuntupopplerpro0.80.0-0ubuntu3vulnerable
Ubuntupopplerpro0.80.0-0ubuntu4vulnerable
Ubuntupopplerpro0.80.0-0ubuntu5vulnerable
Ubuntupopplerpro0.85.0-1ubuntu1vulnerable
Ubuntupopplerpro0.85.0-1ubuntu3vulnerable
Ubuntupopplerpro0.86.1-0ubuntu1vulnerable
Ubuntupopplerpro0.86.1-0ubuntu1.1vulnerable
Ubuntupopplerpro0.86.1-0ubuntu1.2vulnerable
Ubuntupopplerpro0.86.1-0ubuntu1.3vulnerable
Ubuntupopplerpro0.86.1-0ubuntu1.4vulnerable
Ubuntupopplerpro0.86.1-0ubuntu1.5vulnerable
Ubuntupopplerpro0.86.1-0ubuntu1.6vulnerable
Ubuntupopplerpro0.86.1-0ubuntu1.7vulnerable
Ubuntupopplerpro0.86.1-0ubuntu1.7+esm1vulnerable
Ubuntupopplerpro0.86.1-0ubuntu1.7+esm2vulnerable
Ubuntupopplerpro0.86.1-0ubuntu1.7+esm3vulnerable
Ubuntupoppler22.0421.06.1-1vulnerable
Ubuntupoppler22.0421.11.0-1~ubuntu2vulnerable
Ubuntupoppler22.0422.02.0-2vulnerable
Ubuntupoppler22.0422.02.0-2ubuntu0.1vulnerable
Ubuntupoppler22.0422.02.0-2ubuntu0.2vulnerable
Ubuntupoppler22.0422.02.0-2ubuntu0.3vulnerable
Ubuntupoppler22.0422.02.0-2ubuntu0.4vulnerable
Ubuntupoppler22.0422.02.0-2ubuntu0.5vulnerable
Ubuntupoppler22.0422.02.0-2ubuntu0.6vulnerable
Ubuntupoppler22.0422.02.0-2ubuntu0.7vulnerable
Ubuntupoppler22.0422.02.0-2ubuntu0.8vulnerable
Ubuntupoppler22.0422.02.0-2ubuntu0.9vulnerable
Ubuntupoppler22.0422.02.0-2ubuntu0.10vulnerable
Ubuntupoppler22.0422.02.0-2ubuntu0.11vulnerable
Ubuntupoppler22.0422.02.0-2ubuntu0.12vulnerable
Ubuntupoppler22.0422.02.0-2ubuntu0.13vulnerable
Ubuntupoppler22.0422.02.0-2ubuntu0.14fixed
Ubuntupoppler24.0423.08.0-2ubuntu1vulnerable
Ubuntupoppler24.0423.12.0-1ubuntu2vulnerable
Ubuntupoppler24.0424.02.0-1ubuntu2vulnerable
Ubuntupoppler24.0424.02.0-1ubuntu8vulnerable
Ubuntupoppler24.0424.02.0-1ubuntu9vulnerable
Ubuntupoppler24.0424.02.0-1ubuntu9.1vulnerable
Ubuntupoppler24.0424.02.0-1ubuntu9.2vulnerable
Ubuntupoppler24.0424.02.0-1ubuntu9.3vulnerable
Ubuntupoppler24.0424.02.0-1ubuntu9.4vulnerable
Ubuntupoppler24.0424.02.0-1ubuntu9.5vulnerable
Ubuntupoppler24.0424.02.0-1ubuntu9.6vulnerable
Ubuntupoppler24.0424.02.0-1ubuntu9.7vulnerable
Ubuntupoppler24.0424.02.0-1ubuntu9.8vulnerable
Ubuntupoppler24.0424.02.0-1ubuntu9.9vulnerable
Ubuntupoppler24.0424.02.0-1ubuntu9.10fixed
Ubuntupoppler26.0425.03.0-10vulnerable
Ubuntupoppler26.0425.03.0-11.1vulnerable
Ubuntupoppler26.0426.01.0-2build2vulnerable
Ubuntupoppler26.0426.01.0-2ubuntu0.1vulnerable
Ubuntupoppler26.0426.01.0-2ubuntu0.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianpopplersourcesid26.07.0-3not yet assignedNot reported[1148266]
Debianpopplersourceforky26.07.0-3not yet assignedNot reported[1148266]
Debianpopplersourcetrixie(unfixed)not yet assignedNot reported[1148266]
Debianpopplersourcebookworm(unfixed)not yet assignedNot reported[1148266]
Ubuntupopplerdebnoble24.02.0-1ubuntu9.10Not reportedNot reportedNot reported
Ubuntugir1.2-poppler-0.18debnoble24.02.0-1ubuntu9.10Not reportedNot reportedNot reported
Ubuntulibpoppler-cpp-devdebnoble24.02.0-1ubuntu9.10Not reportedNot reportedNot reported
Ubuntulibpoppler-cpp0t64debnoble24.02.0-1ubuntu9.10Not reportedNot reportedNot reported
Ubuntulibpoppler-devdebnoble24.02.0-1ubuntu9.10Not reportedNot reportedNot reported
Ubuntulibpoppler-glib-devdebnoble24.02.0-1ubuntu9.10Not reportedNot reportedNot reported
Ubuntulibpoppler-glib-docdebnoble24.02.0-1ubuntu9.10Not reportedNot reportedNot reported
Ubuntulibpoppler-glib8t64debnoble24.02.0-1ubuntu9.10Not reportedNot reportedNot reported
Ubuntulibpoppler-private-devdebnoble24.02.0-1ubuntu9.10Not reportedNot reportedNot reported
Ubuntulibpoppler-qt5-1t64debnoble24.02.0-1ubuntu9.10Not reportedNot reportedNot reported
Ubuntulibpoppler-qt5-devdebnoble24.02.0-1ubuntu9.10Not reportedNot reportedNot reported
Ubuntulibpoppler-qt6-3t64debnoble24.02.0-1ubuntu9.10Not reportedNot reportedNot reported
Ubuntulibpoppler-qt6-devdebnoble24.02.0-1ubuntu9.10Not reportedNot reportedNot reported
Ubuntulibpoppler134debnoble24.02.0-1ubuntu9.10Not reportedNot reportedNot reported
Ubuntupoppler-utilsdebnoble24.02.0-1ubuntu9.10Not reportedNot reportedNot reported
Ubuntupopplerdeb22.0422.02.0-2ubuntu0.14Not reportedUBUNTU-CVE-2026-93314Not reported
Ubuntupopplerdeb24.0424.02.0-1ubuntu9.10Not reportedUBUNTU-CVE-2026-93314Not reported
Ubuntupopplerdeb26.0426.01.0-2ubuntu0.2Not reportedUBUNTU-CVE-2026-93314Not reported

[Debian bug #1148266]

Notes

[trixie] poppler: Minor issue [bookworm] poppler: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · amd64 · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u2 · arm64 · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · amd64 · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · arm64 · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

  • [libpoppler126]Affected

    Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · amd64 · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u2 · arm64 · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · amd64 · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · arm64 · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

  • Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · amd64 · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u2 · arm64 · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · amd64 · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · arm64 · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

  • Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · amd64 · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u2 · arm64 · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · amd64 · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · arm64 · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

  • [libpoppler-dev]Affected

    Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · amd64 · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u2 · arm64 · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · amd64 · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · arm64 · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

  • Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · amd64 · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u2 · arm64 · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · amd64 · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · arm64 · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

  • Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · amd64 · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u2 · arm64 · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · amd64 · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · arm64 · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

  • Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · all · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u2 · all · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · all · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · all · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

  • Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · amd64 · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u2 · arm64 · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · amd64 · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · arm64 · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

  • Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · amd64 · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u2 · arm64 · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · amd64 · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · arm64 · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

  • Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · amd64 · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u2 · arm64 · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · amd64 · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · arm64 · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

  • Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · amd64 · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u2 · arm64 · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · amd64 · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · arm64 · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

  • Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · amd64 · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u2 · arm64 · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · amd64 · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · arm64 · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

  • [poppler-utils]Affected

    Source package: [poppler]

    Details (4)
    • 22.12.0-2+deb12u2 · amd64 · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u2 · arm64 · bookworm

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · amd64 · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

    • 22.12.0-2+deb12u3 · arm64 · bookworm-security

      Affected

      nvd · poppler · debian · bookworm; nvd · poppler · debian · 12

[Debian 13 (Trixie)]

  • Source package: [poppler]

    Details (4)
    • 25.03.0-5+deb13u4 · amd64 · trixie

      Affected

      nvd · poppler · debian · 13

    • 25.03.0-5+deb13u4 · arm64 · trixie

      Affected

      nvd · poppler · debian · 13

    • 25.03.0-5+deb13u3 · amd64 · trixie-security

      Affected

      nvd · poppler · debian · 13

    • 25.03.0-5+deb13u3 · arm64 · trixie-security

      Affected

      nvd · poppler · debian · 13

  • [libpoppler147]Affected

    Source package: [poppler]

    Details (4)
    • 25.03.0-5+deb13u4 · amd64 · trixie

      Affected

      nvd · poppler · debian · 13

    • 25.03.0-5+deb13u4 · arm64 · trixie

      Affected

      nvd · poppler · debian · 13

    • 25.03.0-5+deb13u3 · amd64 · trixie-security

      Affected

      nvd · poppler · debian · 13

    • 25.03.0-5+deb13u3 · arm64 · trixie-security

      Affected

      nvd · poppler · debian · 13

  • [libpoppler-cpp2]Affected

    Source package: [poppler]

    Details (4)
    • 25.03.0-5+deb13u4 · amd64 · trixie

      Affected

      nvd · poppler · debian · 13

    • 25.03.0-5+deb13u4 · arm64 · trixie

      Affected

      nvd · poppler · debian · 13

    • 25.03.0-5+deb13u3 · amd64 · trixie-security

      Affected

      nvd · poppler · debian · 13

    • 25.03.0-5+deb13u3 · arm64 · trixie-security

      Affected

      nvd · poppler · debian · 13

  • Source package: [poppler]

    Details (4)
    • 25.03.0-5+deb13u4 · amd64 · trixie

      Affected

      nvd · poppler · debian · 13

    • 25.03.0-5+deb13u4 · arm64 · trixie

      Affected

      nvd · poppler · debian · 13

    • 25.03.0-5+deb13u3 · amd64 · trixie-security

      Affected

      nvd · poppler · debian · 13

    • 25.03.0-5+deb13u3 · arm64 · trixie-security

      Affected

      nvd · poppler · debian · 13

  • [libpoppler-dev]Affected

    Source package: [poppler]

    Details (4)
    • 25.03.0-5+deb13u4 · amd64 · trixie

      Affected

      nvd · poppler · debian · 13

    • 25.03.0-5+deb13u4 · arm64 · trixie

      Affected

      nvd · poppler · debian · 13

    • 25.03.0-5+deb13u3 · amd64 · trixie-security

      Affected

      nvd · poppler · debian · 13

    • 25.03.0-5+deb13u3 · arm64 · trixie-security

      Affected

      nvd · poppler · debian · 13

  • Source package: [poppler]

    Details (4)
    • 25.03.0-5+deb13u4 · amd64 · trixie

      Affected

      nvd · poppler · debian · 13

    • 25.03.0-5+deb13u4 · arm64 · trixie

      Affected

      nvd · poppler · debian · 13

    • 25.03.0-5+deb13u3 · amd64 · trixie-security

      Affected

      nvd · poppler · debian · 13

    • 25.03.0-5+deb13u3 · arm64 · trixie-security

      Affected

      nvd · poppler · debian · 13

Next results

Observed:

References