CVE-2026-93653

A denial of service flaw was found in Poppler's Splash backend. A crafted PDF with tiling-pattern geometry approaching the int32 boundary can cause SplashOutputDev::tilingPatternFill to compute an attacker-controlled repeat count that drives an excessively long loop in the pattern-fill scanline routine, without a corresponding memory allocation. An attacker could exploit this by supplying a malicious PDF to an application that renders it via Poppler's Splash backend, causing the rendering process to consume 100% CPU for an attacker-controlled, extended duration.

This Moderate impact flaw in Poppler's Splash backend can lead to a denial of service when processing specially crafted PDF files. Applications that render untrusted PDFs using Poppler's Splash backend are susceptible to an unbounded CPU loop, consuming significant system resources.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, avoid opening or processing untrusted PDF files with applications that rely on Poppler's Splash backend. This operational control reduces the risk of an attacker triggering the denial of service vulnerability.