CVE-2026-93312

MediumCVSS 4.3/10Last modified Sep 22, 2026

Description

A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dereference. It is possible to initiate the attack remotely. The exploit has been published and may be used. Upgrading to version 26.08.0 is recommended to address this issue. Patch name: 5e49250f13b0390edeb3f90eb4c02c9941f97067. Upgrading the affected component is advised.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-404CWE-476

Affected software

No affected versions have been published.

Timeline

Published
Sep 18, 2026
Last modified
Sep 22, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-933136.3A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTableSeg of the file popCVE-2026-933146.3A vulnerability was determined in Freedesktop Poppler 26.07.0. This affects the function FoFiTrueType::mapCodeToGID of the file fofi/FoFiTruCVE-2026-933155.8When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operatCVE-2026-933167.1If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciouslCVE-2026-933175.9An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digeCVE-2026-933187.5A malicious image can advertise DiffIDs from another image while containing different layer contents. In affected versions, BuildKit could uCVE-2026-933195.7A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause thCVE-2026-933206.0BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operCVE-2026-933216.9A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemCVE-2026-933226.9A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemCVE-2026-933236.8The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context cCVE-2026-933266.0A build step for a Git source, crafted in a specific way, can bypass some policy validation rules. A malicious build definition can make the