https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:32:12 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:24984 <p><strong>Affected:</strong> AlmaLinux:8: poppler, AlmaLinux:8: poppler-cpp, AlmaLinux:8: poppler-cpp-devel, AlmaLinux:8: poppler-devel, AlmaLinux:8: poppler-glib, AlmaLinux:8: poppler-glib-devel, AlmaLinux:8: poppler-glib-doc, AlmaLinux:8: poppler-qt5, AlmaLinux:8: poppler-qt5-devel, AlmaLinux:8: poppler-utils</p> <p>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.</p> <p>Security Fix(es):</p> <p>* poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication (CVE-2026-10118)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: poppler, AlmaLinux:8: poppler-cpp, AlmaLinux:8: poppler-cpp-devel, AlmaLinux:8: poppler-devel, AlmaLinux:8: poppler-glib, AlmaLinux:8: poppler-glib-devel, AlmaLinux:8: poppler-glib-doc, AlmaLinux:8: poppler-qt5, AlmaLinux:8: poppler-qt5-devel, AlmaLinux:8: poppler-utils</p> <p>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.</p> <p>Security Fix(es):</p> <p>* poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication (CVE-2026-10118)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:24984 https://cve.radiocsirt.org/vuln/bdu:2026-10558 bdu:2026-10558 https://cve.radiocsirt.org/vuln/bdu:2026-10558 https://cve.radiocsirt.org/vuln/bell-cve-2026-10118 <p><strong>Affected:</strong> Alpaquita:23: poppler, Alpaquita:25: poppler, Alpaquita:stream: poppler</p> <p><strong>Affected:</strong> Alpaquita:23: poppler, Alpaquita:25: poppler, Alpaquita:stream: poppler</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-10118 https://cve.radiocsirt.org/vuln/euvd-2026-382023 EUVD-2026-382023 https://cve.radiocsirt.org/vuln/euvd-2026-382023 https://cve.radiocsirt.org/vuln/fkie_cve-2026-10118 <p>A flaw was found in Poppler&#39;s Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the `tilingPatternFill` function. This overflow leads to an undersized heap memory allocation, allowing a subsequent out-of-bounds write. Successful exploitation could result in arbitrary code execution, information disclosure, or denial of service within the context of the application processing the PDF.</p> <p>A flaw was found in Poppler&#39;s Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the `tilingPatternFill` function. This overflow leads to an undersized heap memory allocation, allowing a subsequent out-of-bounds write. Successful exploitation could result in arbitrary code execution, information disclosure, or denial of service within the context of the application processing the PDF.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-10118 https://cve.radiocsirt.org/vuln/ghsa-469x-qwp6-693q <p>A flaw was found in Poppler&#39;s Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the `tilingPatternFill` function. This overflow leads to an undersized heap memory allocation, allowing a subsequent out-of-bounds write. Successful exploitation could result in arbitrary code execution, information disclosure, or denial of service within the context of the application processing the PDF.</p> <p>A flaw was found in Poppler&#39;s Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the `tilingPatternFill` function. This overflow leads to an undersized heap memory allocation, allowing a subsequent out-of-bounds write. Successful exploitation could result in arbitrary code execution, information disclosure, or denial of service within the context of the application processing the PDF.</p> https://cve.radiocsirt.org/vuln/ghsa-469x-qwp6-693q https://cve.radiocsirt.org/vuln/oesa-2026-2603 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP3: poppler</p> <p>is a PDF rendering library. Security Fix(es):</p> <p>A flaw was found in Poppler&amp;apos;s Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the `tilingPatternFill` function. This overflow leads to an undersized heap memory allocation, allowing a subsequent out-of-bounds write. Successful exploitation could result in arbitrary code execution, information disclosure, or denial of service within the context of the application processing the PDF.(CVE-2026-10118)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP3: poppler</p> <p>is a PDF rendering library. Security Fix(es):</p> <p>A flaw was found in Poppler&amp;apos;s Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the `tilingPatternFill` function. This overflow leads to an undersized heap memory allocation, allowing a subsequent out-of-bounds write. Successful exploitation could result in arbitrary code execution, information disclosure, or denial of service within the context of the application processing the PDF.(CVE-2026-10118)</p> https://cve.radiocsirt.org/vuln/oesa-2026-2603 https://cve.radiocsirt.org/vuln/rhsa-2026:24984 <p>poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication</p> <p>poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication</p> https://cve.radiocsirt.org/vuln/rhsa-2026:24984 https://cve.radiocsirt.org/vuln/rhsa-2026:27720 <p>poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication</p> <p>poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication</p> https://cve.radiocsirt.org/vuln/rhsa-2026:27720 https://cve.radiocsirt.org/vuln/rlsa-2026:24984 <p><strong>Affected:</strong> Rocky Linux:8: poppler</p> <p>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.</p> <p>Security Fix(es):</p> <p>* poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication (CVE-2026-10118)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> Rocky Linux:8: poppler</p> <p>Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.</p> <p>Security Fix(es):</p> <p>* poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication (CVE-2026-10118)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/rlsa-2026:24984 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-10118 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: poppler, Ubuntu:Pro:18.04:LTS: poppler, Ubuntu:Pro:20.04:LTS: poppler, Ubuntu:22.04:LTS: poppler, Ubuntu:24.04:LTS: poppler, Ubuntu:25.10: poppler, Ubuntu:26.04:LTS: poppler</p> <p>A flaw was found in Poppler&#39;s Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the `tilingPatternFill` function. This overflow leads to an undersized heap memory allocation, allowing a subsequent out-of-bounds write. Successful exploitation could result in arbitrary code execution, information disclosure, or denial of service within the context of the application processing the PDF.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: poppler, Ubuntu:Pro:18.04:LTS: poppler, Ubuntu:Pro:20.04:LTS: poppler, Ubuntu:22.04:LTS: poppler, Ubuntu:24.04:LTS: poppler, Ubuntu:25.10: poppler, Ubuntu:26.04:LTS: poppler</p> <p>A flaw was found in Poppler&#39;s Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the `tilingPatternFill` function. This overflow leads to an undersized heap memory allocation, allowing a subsequent out-of-bounds write. Successful exploitation could result in arbitrary code execution, information disclosure, or denial of service within the context of the application processing the PDF.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-10118 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1867 <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1867