CVE-2026-93314 | Freedesktop Poppler 26.07.0 fofi/FoFiTrueType.cc mapCodeToGID segCnt integer overflow (ID 1761)

September 17, 2026 Yanac

A vulnerability labeled as critical has been found in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTrueType.cc. Executing a manipulation of the argument segCnt can lead to integer overflow.

This vulnerability is tracked as CVE-2026-93314. The attack can be launched remotely. Moreover, an exploit is present.

It is advisable to implement a patch to correct this issue.VulDB Recent EntriesRead More