High RHSA-2026:29952 1 CVE

Red Hat Security Advisory: compat-poppler022 security update

Published Jun 26, 2026 · Updated Oct 2, 2026

Ecosystem: Red Hat

Fixed packages 5

Release	Package	Fixed in
Red Hat · RHEL 7 ELS rhel_els:7	compat-poppler022	0:0.22.5-7.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	compat-poppler022-cpp	0:0.22.5-7.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	compat-poppler022-debuginfo	0:0.22.5-7.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	compat-poppler022-glib	0:0.22.5-7.el7_9
Red Hat · RHEL 7 ELS rhel_els:7	compat-poppler022-qt	0:0.22.5-7.el7_9

Vulnerabilities 1

High 7.8

CVE-2026-10118

Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication

A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the `tilingPatternFill` function. This overflow leads to an undersized heap …

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu

Jun 1, 2026

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2460428
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_29952.json
report
https://access.redhat.com/security/cve/CVE-2026-10118
advisory
https://www.cve.org/CVERecord?id=CVE-2026-10118
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-10118
article
https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1715