CVE-2026-93312

A flaw was found in Freedesktop Poppler. A remote attacker could exploit a null pointer dereference vulnerability in the JBIG2Stream::rewind function. This could lead to a denial of service (DoS), making the application unavailable to legitimate users.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Since Poppler is a library used by various applications to process PDF documents, a direct system-wide mitigation is not readily available. Users should exercise caution when opening untrusted PDF files. If possible, process untrusted PDF documents in a sandboxed environment to limit the potential impact of such vulnerabilities.