CVE-2026-93314

🗓️ 21 Sep 2026 00:00:00Reported by ubuntu.comType

A vulnerability was determined in Freedesktop Poppler 26.07.0. This affectsthe function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc.Executing a manipulation of the argument segCnt can lead to integeroverflow. The attack can be laun...

Reporter	Title	Published	Views	Family All 10
CVE	CVE-2026-93314	18 Sep 202601:30	–	cve
Cvelist	CVE-2026-93314 Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflow	18 Sep 202601:30	–	cvelist
Debian CVE	CVE-2026-93314	18 Sep 202601:30	–	debiancve
EUVD	EUVD-2026-82624	18 Sep 202601:30	–	euvd
NVD	CVE-2026-93314	18 Sep 202602:17	–	nvd
OSV	DEBIAN-CVE-2026-93314	18 Sep 202602:17	–	osv
OSV	ECHO-6F38-4AB4-57A4	18 Sep 202622:20	–	osv
OSV	UBUNTU-CVE-2026-93314	21 Sep 202600:00	–	osv
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-93314	18 Sep 202600:00	–	nessus
Vulnrichment	CVE-2026-93314 Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflow	18 Sep 202601:30	–	vulnrichment

OS	OS Version	Architecture	Package	Filename
Ubuntu	16.04	all	poppler	poppler_0_all.deb
Ubuntu	18.04	all	poppler	poppler_0_all.deb
Ubuntu	20.04	all	poppler	poppler_0_all.deb
Ubuntu	22.04	all	poppler	poppler_0_all.deb
Ubuntu	24.04	all	poppler	poppler_0_all.deb
Ubuntu	26.04	all	poppler	poppler_0_all.deb

Source	Link
cve	www.cve.org/CVERecord
gitlab	www.gitlab.freedesktop.org/poppler/poppler/-/work_items/1761
gitlab	www.gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2315
github	www.github.com/r1ck9-2q/cve_summit/blob/main/Signed-integer-overflow-in-FoFiTrueType-mapCodeToGID-FoFiTrueType.cc-608.md
gitlab	www.gitlab.freedesktop.org/poppler/poppler/-/commit/ed2a5538cf0a8d3ff908191eda9b73f91a5f952a
vuldb	www.vuldb.com/cve/CVE-2026-93314
vuldb	www.vuldb.com/submit/942347
vuldb	www.vuldb.com/vuln/406613
vuldb	www.vuldb.com/vuln/406613/cti

21 Sep 2026 20:04Current

CVSS 45.3

CVSS 3.16.3

CVSS 27.5

CVSS 36.3

EPSS0.00247