Description
An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA!=6 case 1.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | ipe | No fix yet | — |
| Ubuntu 26.04 LTS | ipe | No fix yet | — |
| Ubuntu 25.10 | ipe | No fix yet | — |
| Ubuntu 24.04 LTS | ipe | No fix yet | — |
| Ubuntu 22.04 LTS | ipe | No fix yet | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | ipe | No fix yet | — |
| Ubuntu 18.04 LTS | ipe | No fix yet | — |
| Ubuntu 16.04 LTS | ipe | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | poppler | 0.24.4-14.41.1 | SUSE-SU-2023:4546-1, SUSE-SU-2023:4362-1 |
| SLES 12 SP5 | poppler-qt | 0.43.0-16.40.1 | SUSE-SU-2023:4362-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP5 | poppler +1 | 0.43.0-16.40.1 | SUSE-SU-2023:4362-1 |
Advisories 2
- SUSE-SU-2023:4546-1 Security update for poppler SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2023:4362-1 Security update for poppler SUSE / openSUSE Security Updates · Feb 4, 2026