OSV-2026-1121

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/poppler/OSV-2026-1121.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-1121
Published
2026-08-07T00:22:32Z
Modified
2026-11-04T12:30:10Z
Summary
Heap-buffer-overflow in cairo_type1_font_subset_for_each_glyph
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=542872505

Crash type: Heap-buffer-overflow READ 1
Crash state:
cairo_type1_font_subset_for_each_glyph
_cairo_type1_subset_init
_cairo_pdf_surface_emit_unscaled_font_subset
References

Affected packages

OSS-Fuzz / poppler

Package

Name
poppler
Purl
pkg:generic/poppler

Affected ranges

Type
GIT
Repo
https://gitlab.freedesktop.org/poppler/poppler.git
Events

Affected versions

poppler-26.*
poppler-26.02.0
poppler-26.03.0
poppler-26.04.0
poppler-26.05.0
poppler-26.06.0
poppler-26.07.0
poppler-26.08.0
poppler-26.09.0
poppler-26.10.0

Ecosystem specific

{
    "severity": "MEDIUM"
}

Database specific

introduced_range
"ba84d698e6e6f2b5c27adda30165b8b9fdab9200:ac8ba0f102ee1eaeb879c8b2f8ad05a848cf0a2d"
source
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/poppler/OSV-2026-1121.yaml"