Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-10118: A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the `tilingPatternFill` function. This overflow leads to an undersized heap memory allocation, allowing a subsequent out-of-bounds write. Successful exploitation could result in arbitrary code execution, information disclosure, or denial of service within the context of the application processing the PDF.
Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | poppler | 0:0.26.5-43.amzn2.1.7 |
| Amazon Linux · 2 | poppler-cpp | 0:0.26.5-43.amzn2.1.7 |
| Amazon Linux · 2 | poppler-cpp-devel | 0:0.26.5-43.amzn2.1.7 |
| Amazon Linux · 2 | poppler-debuginfo | 0:0.26.5-43.amzn2.1.7 |
| Amazon Linux · 2 | poppler-demos | 0:0.26.5-43.amzn2.1.7 |
| Amazon Linux · 2 | poppler-devel | 0:0.26.5-43.amzn2.1.7 |
| Amazon Linux · 2 | poppler-glib | 0:0.26.5-43.amzn2.1.7 |
| Amazon Linux · 2 | poppler-glib-devel | 0:0.26.5-43.amzn2.1.7 |
| Amazon Linux · 2 | poppler-qt | 0:0.26.5-43.amzn2.1.7 |
| Amazon Linux · 2 | poppler-qt-devel | 0:0.26.5-43.amzn2.1.7 |
| Amazon Linux · 2 | poppler-utils | 0:0.26.5-43.amzn2.1.7 |
Vulnerabilities 1
-
High 7.8
Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication
A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the `tilingPatternFill` function. This overflow leads to an undersized heap …
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2026-10118.html