CyberRota Analysis
AI-GeneratedFreedesktop Poppler versions 26.06.0 to 26.08.0 are vulnerable due to an integer overflow in the FoFiTrueType::cvtSfnts function, which can be exploited locally. Although the severity is rated low, the public disclosure of the exploit means that users should prioritize applying the provided patch to mitigate potential risks. Organizations utilizing these specific versions of Poppler should take immediate action to ensure their systems are secured.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. This impacts the function FoFiTrueType::cvtSfnts of the file fofi/FoFiTrueType.cc. This manipulation causes integer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 245d3c6823377755f2c1d5fdddd010279c6ed94d. It is suggested to install a patch to address this issue.