Ubuntu 26.04 LTS poppler Critical Code Exec Denial of Service USN-8400-1

ubuntu

June 8, 2026

poppler could be made to crash or run programs if it opened a specially crafted file.

Summary

poppler could be made to crash or run programs if it opened a specially

crafted file.

Software Description:

- poppler: PDF rendering library

Details:

It was discovered that poppler incorrectly handled certain malformed PDF

tiling patterns in the Splash backend. An attacker could possibly use this

issue to execute arbitrary code, obtain sensitive information, or cause a

denial of service.

Topics Covered

security advisory denial of service critical code execution Ubuntu poppler

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  libpoppler156                   26.01.0-2ubuntu0.1
  poppler-utils                   26.01.0-2ubuntu0.1

Ubuntu 25.10
  libpoppler147                   25.03.0-10ubuntu0.2
  poppler-utils                   25.03.0-10ubuntu0.2

Ubuntu 24.04 LTS
  libpoppler134                   24.02.0-1ubuntu9.9
  poppler-utils                   24.02.0-1ubuntu9.9

Ubuntu 22.04 LTS
  libpoppler118                   22.02.0-2ubuntu0.13
  poppler-utils                   22.02.0-2ubuntu0.13

In general, a standard system update will make all the necessary changes.