Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Adobe Acrobat, Evince: Heap Buffer Overflow in PDF Rendering
published 4 months ago
Summary
A security update is available for PDF rendering library poppler, which is used by Adobe Acrobat and Evince. This update fixes a critical issue that could allow an attacker to execute malicious code on a vulnerable system. We recommend applying the update as soon as possible to ensure the security of your systems.
What to do
- Update almalinux poppler to version 20.11.0-14.el8_10.
- Update almalinux poppler-cpp to version 20.11.0-14.el8_10.
- Update almalinux poppler-cpp-devel to version 20.11.0-14.el8_10.
- Update almalinux poppler-devel to version 20.11.0-14.el8_10.
- Update almalinux poppler-glib to version 20.11.0-14.el8_10.
- Update almalinux poppler-glib-devel to version 20.11.0-14.el8_10.
- Update almalinux poppler-glib-doc to version 20.11.0-14.el8_10.
- Update almalinux poppler-qt5 to version 20.11.0-14.el8_10.
- Update almalinux poppler-qt5-devel to version 20.11.0-14.el8_10.
- Update almalinux poppler-utils to version 20.11.0-14.el8_10.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:8 | almalinux | poppler |
< 20.11.0-14.el8_10 Fix: upgrade to 20.11.0-14.el8_10
|
| AlmaLinux:8 | almalinux | poppler-cpp |
< 20.11.0-14.el8_10 Fix: upgrade to 20.11.0-14.el8_10
|
| AlmaLinux:8 | almalinux | poppler-cpp-devel |
< 20.11.0-14.el8_10 Fix: upgrade to 20.11.0-14.el8_10
|
| AlmaLinux:8 | almalinux | poppler-devel |
< 20.11.0-14.el8_10 Fix: upgrade to 20.11.0-14.el8_10
|
| AlmaLinux:8 | almalinux | poppler-glib |
< 20.11.0-14.el8_10 Fix: upgrade to 20.11.0-14.el8_10
|
| AlmaLinux:8 | almalinux | poppler-glib-devel |
< 20.11.0-14.el8_10 Fix: upgrade to 20.11.0-14.el8_10
|
| AlmaLinux:8 | almalinux | poppler-glib-doc |
< 20.11.0-14.el8_10 Fix: upgrade to 20.11.0-14.el8_10
|
| AlmaLinux:8 | almalinux | poppler-qt5 |
< 20.11.0-14.el8_10 Fix: upgrade to 20.11.0-14.el8_10
|
| AlmaLinux:8 | almalinux | poppler-qt5-devel |
< 20.11.0-14.el8_10 Fix: upgrade to 20.11.0-14.el8_10
|
| AlmaLinux:8 | almalinux | poppler-utils |
< 20.11.0-14.el8_10 Fix: upgrade to 20.11.0-14.el8_10
|
Original advisory text
Important: poppler security update
Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.
Security Fix(es):
* poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication (CVE-2026-10118)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication (CVE-2026-10118)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://access.redhat.com/errata/RHSA-2026:24984 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-10118 Third Party Advisory
- https://bugzilla.redhat.com/2460428 Third Party Advisory
- https://errata.almalinux.org/8/ALSA-2026-24984.html Vendor Advisory
Timeline
Published10 Jun 2026
Updated10 Jun 2026
First seen10 Jun 2026
Sources
ALSA-2026:24984 · OSV
Track software like this
Free during beta