Red Hat Security Advisory

RHSA-2026:0796

poppler security update

Released 2026-01-19 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.2) poppler-21.01.0-15.el9_2, poppler-cpp-21.01.0-15.el9_2, poppler-glib-21.01.0-15.el9_2 +2

Fixes 1 record

TI-2025-23445 CVE-2025-32365 · GHSA-r4rq-7765-p57x

Out-of-bounds read in Freedesktop Poppler

LOW 31

Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced isOk check.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00255 Published 2025-04-05 Partial fix · 25.04.0 CWE-125