CVE-2026-102621
Freedesktop Poppler SplashClip.cc clipToPath integer overflow
Freedesktop Poppler
CVSS
4.8MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.11%Chance of exploitation activity in the next 30 days, higher than 1% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
A vulnerability was identified in Freedesktop Poppler up to 26.08.0. Affected is the function SplashClip::clipToPath of the file splash/SplashClip.cc. Such manipulation leads to integer overflow. The attack can only be performed from a local environment. The exploit is publicly available and might be used. Upgrading to version 26.09.0 is able to address this issue. The name of the patch is 323c91036d99926a8b90dc14329f7b40aece22f8. It is recommended to upgrade the affected component.
Text from CVE List
Affected versions 2
- Poppleraffected: 26.08CVE List
- Popplerunaffected: 26.09.0CVE List
References 8
- gitlab.freedesktop.org/poppler/poppler/-/merge_requests/2325Fixvia CVE List
- gitlab.freedesktop.org/poppler/poppler/-/commit/323c91036d99926a8b90dc14329f7b40aece22f8Fixvia CVE List
- vuldb.com/cve/CVE-2026-102621Advisoryvia CVE List
- vuldb.com/submit/942349Advisoryvia CVE List
- github.com/r1ck9-2q/cve_summit/blob/main/Signed-integer-overflow-in-SplashClip-clipToPath-SplashClip.cc-214.mdExploitvia CVE List
- vuldb.com/vuln/411411Referencevia CVE List
- vuldb.com/vuln/411411/ctiReferencevia CVE List
- gitlab.freedesktop.org/poppler/poppler/-/work_items/1763Referencevia CVE List