https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T10:25:12.512817+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-384795 EUVD-2026-384795 2026-10-17T10:25:12.517123+00:00 EUVD-2026-384795 https://cve.radiocsirt.org/vuln/fkie_cve-2026-107705 fkie_cve-2026-107705 2026-10-17T10:25:12.517154+00:00

Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash() that allows attackers controlling the password to overwrite stack memory when opening AESV3/R6 encrypted PDFs. Attackers can supply a password longer than 127 bytes through applications using the libpoppler, libpoppler-glib or C++ API to overflow the K1 and E buffers, crashing the process or corrupting memory.

 https://cve.radiocsirt.org/vuln/ghsa-939q-g65h-55jw GHSA-939q-g65h-55jw 2026-10-17T10:25:12.517185+00:00

Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash() that allows attackers controlling the password to overwrite stack memory when opening AESV3/R6 encrypted PDFs. Attackers can supply a password longer than 127 bytes through applications using the libpoppler, libpoppler-glib or C++ API to overflow the K1 and E buffers, crashing the process or corrupting memory.

 https://cve.radiocsirt.org/vuln/rhsa-2026:80172 RHSA-2026:80172 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 2026-10-17T10:25:12.517202+00:00

poppler: poppler: Denial of Service via stack-based buffer overflow in PDF decryption

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-107705 UBUNTU-CVE-2026-107705 2026-10-17T10:25:12.517220+00:00

Affected: Ubuntu:Pro:16.04:LTS: poppler, Ubuntu:Pro:18.04:LTS: poppler, Ubuntu:Pro:20.04:LTS: poppler, Ubuntu:22.04:LTS: poppler, Ubuntu:24.04:LTS: poppler, Ubuntu:26.04:LTS: poppler

Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash() that allows attackers controlling the password to overwrite stack memory when opening AESV3/R6 encrypted PDFs. Attackers can supply a password longer than 127 bytes through applications using the libpoppler, libpoppler-glib or C++ API to overflow the K1 and E buffers, crashing the process or corrupting memory.