Back Linuxsecurity

Ubuntu 26.04 LTS Poppler Critical DoS Code Execution Vuln USN-8400

Linuxsecurity •LinuxSecurity Advisories • June 8, 2026

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: poppler could be made to crash or run programs if it opened a specially crafted file. Software Description: - poppler: PDF rendering library Details: It was discovered that poppler incorrectly handled certain malformed PDF tiling patterns in the Splash backend. An attacker could possibly use this issue to execute arbitrary code, obtain sensitive information, or cause a denial of service.

The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS libpoppler156 26.01.0-2ubuntu0.1 poppler-utils 26.01.0-2ubuntu0.1 Ubuntu 25.10 libpoppler147 25.03.0-10ubuntu0.2 poppler-utils 25.03.0-10ubuntu0.2 Ubuntu 24.04 LTS libpoppler134 24.02.0-1ubuntu9.9 poppler-utils 24.02.0-1ubuntu9.9 Ubuntu 22.04 LTS libpoppler118 22.02.0-2ubuntu0.13 poppler-utils 22.02.0-2ubuntu0.13 In general, a standard system update will make all the necessary changes.

Ubuntu Security Notice USN-8400-1

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Poppler Vulnerability in Ubuntu Allows Code Execution and DoS A vulnerability in Poppler, a PDF rendering library, has been identified that could allow attackers to crash systems or execute arbitrary code by opening specially crafted PDF files. This flaw affects multiple Ubuntu releases, including 26.04 LTS, 25.10, 24.04 LTS, and 22.04 LTS. The vulnerability arises from Poppler's improper handling of malformed PDF tiling patterns in the Splash backend. Attackers may exploit this issue to gain access to sensitive information or cause a denial of service. Users are advised to update their systems to the latest package versions to mitigate the risk. A standard system update is sufficient to apply the necessary changes. The issue was disclosed in Ubuntu Security Notice USN-8400-1, published on June 8, 2026. 2 sources 72

Extracted Entities

Ubuntu 26.04 LTS Poppler Critical DoS Code Execution Vuln USN-8400

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Platforms (2)