CVE-2026-93312

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-93312", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-09-17T17:13:08.412Z", "datePublished": "2026-09-18T00:45:12.489Z", "dateUpdated": "2026-09-22T18:23:02.769Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-09-18T00:45:12.489Z"}, "title": "Freedesktop Poppler JBIG2Stream.cc rewind null pointer dereference", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-476", "lang": "en", "description": "NULL Pointer Dereference"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-404", "lang": "en", "description": "Denial of Service"}]}], "affected": [{"vendor": "Freedesktop", "product": "Poppler", "versions": [{"version": "26.07.0", "status": "affected"}, {"version": "26.08.0", "status": "unaffected"}], "cpes": ["cpe:2.3:a:freedesktop:poppler:*:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dereference. It is possible to initiate the attack remotely. The exploit has been published and may be used. Upgrading to version 26.08.0 is recommended to address this issue. Patch name: 5e49250f13b0390edeb3f90eb4c02c9941f97067. Upgrading the affected component is advised."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 4.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 4.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 5, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:OF/RC:C"}}], "timeline": [{"time": "2026-09-17T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-09-17T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-09-17T19:18:24.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "r1ck99 (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/vuln/406610", "name": "VDB-406610 | Freedesktop Poppler JBIG2Stream.cc rewind null pointer dereference", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/406610/cti", "name": "VDB-406610 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-93312", "name": "CVE-2026-93312 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/942345", "name": "Submit #942345 | freedesktop.org Poppler 26.07.0 NULL Pointer Dereference", "tags": ["third-party-advisory"]}, {"url": "https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1759", "tags": ["related"]}, {"url": "https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2314", "tags": ["patch"]}, {"url": "https://github.com/r1ck9-2q/cve_summit/blob/main/Null-pointer-offset-undefined-behavior-in-JBIG2Stream-rewind-JBIG2Stream.cc-1229.md", "tags": ["exploit"]}, {"url": "https://gitlab.freedesktop.org/poppler/poppler/-/commit/5e49250f13b0390edeb3f90eb4c02c9941f97067", "tags": ["broken-link", "patch"]}], "tags": ["x_open-source"], "x_generator": ["VulDB PVTS v202609"]}, "adp": [{"references": [{"url": "https://vuldb.com/submit/942345", "tags": ["exploit"]}, {"url": "https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1759", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-09-22T18:22:51.076168Z", "id": "CVE-2026-93312", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-22T18:23:02.769Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-93312", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-22T18:22:51.076168Z"}}}], "references": [{"url": "https://vuldb.com/submit/942345", "tags": ["exploit"]}, {"url": "https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1759", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-22T18:22:20.943Z"}}], "cna": {"tags": ["x_open-source"], "title": "Freedesktop Poppler JBIG2Stream.cc rewind null pointer dereference", "credits": [{"lang": "en", "type": "reporter", "value": "r1ck99 (VulDB User)"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 5, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:OF/RC:C"}}], "affected": [{"cpes": ["cpe:2.3:a:freedesktop:poppler:*:*:*:*:*:*:*:*"], "vendor": "Freedesktop", "product": "Poppler", "versions": [{"status": "affected", "version": "26.07.0"}, {"status": "unaffected", "version": "26.08.0"}]}], "timeline": [{"lang": "en", "time": "2026-09-17T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-09-17T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-09-17T19:18:24.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/406610", "name": "VDB-406610 | Freedesktop Poppler JBIG2Stream.cc rewind null pointer dereference", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/406610/cti", "name": "VDB-406610 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-93312", "name": "CVE-2026-93312 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/942345", "name": "Submit #942345 | freedesktop.org Poppler 26.07.0 NULL Pointer Dereference", "tags": ["third-party-advisory"]}, {"url": "https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1759", "tags": ["related"]}, {"url": "https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2314", "tags": ["patch"]}, {"url": "https://github.com/r1ck9-2q/cve_summit/blob/main/Null-pointer-offset-undefined-behavior-in-JBIG2Stream-rewind-JBIG2Stream.cc-1229.md", "tags": ["exploit"]}, {"url": "https://gitlab.freedesktop.org/poppler/poppler/-/commit/5e49250f13b0390edeb3f90eb4c02c9941f97067", "tags": ["broken-link", "patch"]}], "x_generator": ["VulDB PVTS v202609"], "descriptions": [{"lang": "en", "value": "A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dereference. It is possible to initiate the attack remotely. The exploit has been published and may be used. Upgrading to version 26.08.0 is recommended to address this issue. Patch name: 5e49250f13b0390edeb3f90eb4c02c9941f97067. Upgrading the affected component is advised."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-476", "description": "NULL Pointer Dereference"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-404", "description": "Denial of Service"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-09-18T00:45:12.489Z"}}}, "cveMetadata": {"cveId": "CVE-2026-93312", "state": "PUBLISHED", "dateUpdated": "2026-09-22T18:23:02.769Z", "dateReserved": "2026-09-17T17:13:08.412Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-09-18T00:45:12.489Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:freedesktop:poppler:*:*:*:*:*:*:*:*"], "product": "Poppler", "vendor": "Freedesktop", "versions": [{"status": "affected", "version": "26.07.0"}, {"status": "unaffected", "version": "26.08.0"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dereference. It is possible to initiate the attack remotely. The exploit has been published and may be used. Upgrading to version 26.08.0 is recommended to address this issue. Patch name: 5e49250f13b0390edeb3f90eb4c02c9941f97067. Upgrading the affected component is advised."}], "id": "CVE-2026-93312", "lastModified": "2026-09-22T19:16:57.607", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 2.1, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "PASSIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-93312", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-09-22T18:22:51.076168Z", "version": "2.0.3"}}]}, "published": "2026-09-18T01:16:56.710", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/r1ck9-2q/cve_summit/blob/main/Null-pointer-offset-undefined-behavior-in-JBIG2Stream-rewind-JBIG2Stream.cc-1229.md"}, {"source": "cna@vuldb.com", "url": "https://gitlab.freedesktop.org/poppler/poppler/-/commit/5e49250f13b0390edeb3f90eb4c02c9941f97067"}, {"source": "cna@vuldb.com", "url": "https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2314"}, {"source": "cna@vuldb.com", "url": "https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1759"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/cve/CVE-2026-93312"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/942345"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/406610"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/406610/cti"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1759"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://vuldb.com/submit/942345"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-404"}, {"lang": "en", "value": "CWE-476"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{"bugzilla": {"description": "poppler: Freedesktop Poppler: Denial of Service via null pointer dereference in JBIG2Stream::rewind function", "id": "2537889", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2537889"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.3", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-476", "details": ["A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dereference. It is possible to initiate the attack remotely. The exploit has been published and may be used. Upgrading to version 26.08.0 is recommended to address this issue. Patch name: 5e49250f13b0390edeb3f90eb4c02c9941f97067. Upgrading the affected component is advised.", "A flaw was found in Freedesktop Poppler. A remote attacker could exploit a null pointer dereference vulnerability in the `JBIG2Stream::rewind` function. This could lead to a denial of service (DoS), making the application unavailable to legitimate users."], "mitigation": {"lang": "en:us", "value": "Since Poppler is a library used by various applications to process PDF documents, a direct system-wide mitigation is not readily available. Users should exercise caution when opening untrusted PDF files. If possible, process untrusted PDF documents in a sandboxed environment to limit the potential impact of such vulnerabilities."}, "name": "CVE-2026-93312", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "poppler", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "poppler", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "compat-poppler022", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "poppler", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "poppler", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "poppler", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:hummingbird:1", "fix_state": "Affected", "package_name": "poppler", "product_name": "Red Hat Hardened Images"}], "public_date": "2026-09-18T00:45:12Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-93312\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-93312\nhttps://github.com/r1ck9-2q/cve_summit/blob/main/Null-pointer-offset-undefined-behavior-in-JBIG2Stream-rewind-JBIG2Stream.cc-1229.md\nhttps://gitlab.freedesktop.org/poppler/poppler/-/commit/5e49250f13b0390edeb3f90eb4c02c9941f97067\nhttps://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2314\nhttps://gitlab.freedesktop.org/poppler/poppler/-/work_items/1759\nhttps://vuldb.com/cve/CVE-2026-93312\nhttps://vuldb.com/submit/942345\nhttps://vuldb.com/vuln/406610\nhttps://vuldb.com/vuln/406610/cti"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "26.07.0"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "26.08.0"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Poppler", "source": "cna", "vendor": "Freedesktop"}, "product": "poppler", "vendor": "freedesktop"}], "created": "2026-09-18T11:00:08.918282+00:00", "updated": "2026-09-19T21:15:06.471405+00:00", "vendors": ["freedesktop", "freedesktop$PRODUCT$poppler"]}