CVE-2026-102621: medium-severity vulnerability in Freedesktop Poppler
Freedesktop Poppler SplashClip.cc clipToPath integer overflow
Published · Updated
33Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 4.8epss 0.1%
exploitation probability
0.1%top 99% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function SplashClip::clipToPath of the file splash/SplashClip.cc. Such manipulation leads to integer overflow. The attack can only be performed from a local environment. The exploit is publicly available and might be used. Upgrading to version 26.09.0 is able to address this issue. The name of the patch is 323c91036d99926a8b90dc14329f7b40aece22f8. It is recommended to upgrade the affected component.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
Freedesktop · Popplerpublic PoCs found — 1
cve_referencegithub.com/r1ck9-2q/cve_summit/blob/main/Signed-integer-overflow-in-SplashClip-clipToPath-SplashClip.cc-214.mdunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Freedesktop Poppler
In the same product, most dangerous first.
CVE-2026-93312MEDIUMFreedesktop Poppler JBIG2Stream.cc rewind null pointer dereferenceEPSS 0.6%CVE-2026-93311MEDIUMFreedesktop Poppler SampledFunction Function.cc integer overflowEPSS 0.6%CVE-2026-93314MEDIUMFreedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflowEPSS 0.4%CVE-2026-93313MEDIUMFreedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflowEPSS 0.4%CVE-2026-102620MEDIUMFreedesktop Poppler FoFiTrueType.cc cvtSfnts integer overflowEPSS 0.1%
References
https://github.com/r1ck9-2q/cve_summit/blob/main/Signed-integer-overflow-in-SplashClip-clipToPath-SplashClip.cc-214.mdhttps://gitlab.freedesktop.org/poppler/poppler/-/commit/323c91036d99926a8b90dc14329f7b40aece22f8https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2325https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1763https://vuldb.com/cve/CVE-2026-102621https://vuldb.com/submit/942349https://vuldb.com/vuln/411411https://vuldb.com/vuln/411411/cti