← CVE Intelligence

CVE-2026-93653

Poppler: poppler: unbounded cpu loop in splashoutputdev::tilingpatternfill via unvalidated tiling-pattern repeat count (denial of service) PUBLISHED

Description (CNA)

A denial of service flaw was found in Poppler's Splash backend. A crafted PDF with tiling-pattern geometry approaching the int32 boundary can cause SplashOutputDev::tilingPatternFill to compute an attacker-controlled repeat count that drives an excessively long loop in the pattern-fill scanline routine, without a corresponding memory allocation. An attacker could exploit this by supplying a malicious PDF to an application that renders it via Poppler's Splash backend, causing the rendering process to consume 100% CPU for an attacker-controlled, extended duration.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 10affected
Red Hat / Red Hat Enterprise Linux 6affected
Red Hat / Red Hat Enterprise Linux 7affected
Red Hat / Red Hat Enterprise Linux 7affected
Red Hat / Red Hat Enterprise Linux 8affected
Red Hat / Red Hat Enterprise Linux 9affected
Red Hat / Red Hat Hardened Imagesaffected

CWE

CWE-606

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.