CVE-2026-102621: falha de média gravidade em Freedesktop Poppler
Freedesktop Poppler SplashClip.cc clipToPath integer overflow
Publicada em · Atualizada em
33Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendcvss 4.8epss 0.1%
probabilidade de exploração
0.1%top 99% das CVEs
exploração observada
nãonenhuma fonte reporta
1 exploit(s) público(s)
A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function SplashClip::clipToPath of the file splash/SplashClip.cc. Such manipulation leads to integer overflow. The attack can only be performed from a local environment. The exploit is publicly available and might be used. Upgrading to version 26.09.0 is able to address this issue. The name of the patch is 323c91036d99926a8b90dc14329f7b40aece22f8. It is recommended to upgrade the affected component.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
Freedesktop · PopplerPoCs públicas encontradas — 1
cve_referencegithub.com/r1ck9-2q/cve_summit/blob/main/Signed-integer-overflow-in-SplashClip-clipToPath-SplashClip.cc-214.mdnão verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — Freedesktop Poppler
No mesmo produto, das mais perigosas para as menos.
CVE-2026-93312MEDIUMFreedesktop Poppler JBIG2Stream.cc rewind null pointer dereferenceEPSS 0.6%CVE-2026-93311MEDIUMFreedesktop Poppler SampledFunction Function.cc integer overflowEPSS 0.6%CVE-2026-93314MEDIUMFreedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflowEPSS 0.4%CVE-2026-93313MEDIUMFreedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflowEPSS 0.4%CVE-2026-102620MEDIUMFreedesktop Poppler FoFiTrueType.cc cvtSfnts integer overflowEPSS 0.1%
Referências
https://github.com/r1ck9-2q/cve_summit/blob/main/Signed-integer-overflow-in-SplashClip-clipToPath-SplashClip.cc-214.mdhttps://gitlab.freedesktop.org/poppler/poppler/-/commit/323c91036d99926a8b90dc14329f7b40aece22f8https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2325https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1763https://vuldb.com/cve/CVE-2026-102621https://vuldb.com/submit/942349https://vuldb.com/vuln/411411https://vuldb.com/vuln/411411/cti