PoC Index85,079 CVEs with PoCs

CVE-2026-93312

Freedesktop Poppler JBIG2Stream.cc rewind null pointer dereference

LOW 2.1EPSS 0.4%

A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dereference. It is possible to initiate the attack remotely. The exploit has been published and may be used. Upgrading to version 26.08.0 is recommended to address this issue. Patch name: 5e49250f13b0390edeb3f90eb4c02c9941f97067. Upgrading the affected component is advised.

Affected
Freedesktop · Poppler
CVSS v4.0 VULDB
2.1 LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS v3.1 VULDB
4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CVSS v2.0 VULDB
5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.40% chance of exploitation in the next 30 days, 33rd percentile
Published
2026-09-18
Updated
2026-09-22

Proof-of-concept exploits (1)

References

Related