Summary
It was discovered that poppler incorrectly handled certain malformed PDF
tiling patterns in the Splash backend. An attacker could possibly use this
issue to execute arbitrary code, obtain sensitive information, or cause a
denial of service.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | poppler | 22.02.0-2ubuntu0.13 |
| Ubuntu · 24.04 LTS 24.04:LTS | poppler | 24.02.0-1ubuntu9.9 |
| Ubuntu · 25.10 | poppler | 25.03.0-10ubuntu0.2 |
| Ubuntu · 26.04 LTS 26.04:LTS | poppler | 26.01.0-2ubuntu0.1 |
Vulnerabilities 1
-
High 7.8
Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication
A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the `tilingPatternFill` function. This overflow leads to an undersized heap …
References
-
report
https://ubuntu.com/security/CVE-2026-10118