CVE-2026-102621: fallo de gravedad media en Freedesktop Poppler
Freedesktop Poppler SplashClip.cc clipToPath integer overflow
Publicada el · Actualizada el
33Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 4.8epss 0.1%
probabilidad de explotación
0.1%top 99% de las CVE
explotación observada
noninguna fuente lo reporta
1 exploit(s) público(s)
A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function SplashClip::clipToPath of the file splash/SplashClip.cc. Such manipulation leads to integer overflow. The attack can only be performed from a local environment. The exploit is publicly available and might be used. Upgrading to version 26.09.0 is able to address this issue. The name of the patch is 323c91036d99926a8b90dc14329f7b40aece22f8. It is recommended to upgrade the affected component.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
Freedesktop · PopplerPoCs públicas encontradas — 1
cve_referencegithub.com/r1ck9-2q/cve_summit/blob/main/Signed-integer-overflow-in-SplashClip-clipToPath-SplashClip.cc-214.mdno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — Freedesktop Poppler
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-93312MEDIUMFreedesktop Poppler JBIG2Stream.cc rewind null pointer dereferenceEPSS 0.6%CVE-2026-93311MEDIUMFreedesktop Poppler SampledFunction Function.cc integer overflowEPSS 0.6%CVE-2026-93314MEDIUMFreedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflowEPSS 0.4%CVE-2026-93313MEDIUMFreedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflowEPSS 0.4%CVE-2026-102620MEDIUMFreedesktop Poppler FoFiTrueType.cc cvtSfnts integer overflowEPSS 0.1%
Referencias
https://github.com/r1ck9-2q/cve_summit/blob/main/Signed-integer-overflow-in-SplashClip-clipToPath-SplashClip.cc-214.mdhttps://gitlab.freedesktop.org/poppler/poppler/-/commit/323c91036d99926a8b90dc14329f7b40aece22f8https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2325https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1763https://vuldb.com/cve/CVE-2026-102621https://vuldb.com/submit/942349https://vuldb.com/vuln/411411https://vuldb.com/vuln/411411/cti