Priority LOW 36
Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash() that allows attackers controlling the password to overwrite stack memory when opening AESV3/R6 encrypted PDFs.
RHSA-2026:80172
Red Hat Hardened Images RPMs Security Update
Released 2026-10-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Hardened Images poppler-26.08.0-1.3.hum1@aarch64, poppler-26.08.0-1.3.hum1@src, poppler-26.08.0-1.3.hum1@x86_64 +19