CVE-2026-93314

Name	CVE-2026-93314
Description	A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of the argument segCnt can lead to integer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. This patch is called ed2a5538cf0a8d3ff908191eda9b73f91a5f952a. It is advisable to implement a patch to correct this issue.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	1148266

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
poppler (PTS)	bookworm	22.12.0-2+deb12u2	vulnerable
	bookworm (security)	22.12.0-2+deb12u3	vulnerable
	trixie	25.03.0-5+deb13u4	vulnerable
	trixie (security)	25.03.0-5+deb13u3	vulnerable
	forky, sid	26.07.0-2	vulnerable

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
poppler	source	(unstable)	(unfixed)			1148266

Notes

https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1761
https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2315
Fixed by: https://gitlab.freedesktop.org/poppler/poppler/-/commit/ed2a5538cf0a8d3ff908191eda9b73f91a5f952a (poppler-26.08.0)