Debian/poppler: unknown
Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash() that allows attackers controlling the password to overwrite stack memory when opening AESV3/R6 encrypt
Action: Upgrade poppler to 26.07.0-4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 26.07.0-4 | - |
Fixed versions
| 26.07.0-4 |
Sources
- osv: DEBIAN-CVE-2026-107705#Debian:14/poppler
- https://security-tracker.debian.org/tracker/CVE-2026-107705
published · modified · JSON