Skip to content
Critical Poppler Vulnerability in Ubuntu Allows Code Execution and DoS

Critical Poppler Vulnerability in Ubuntu Allows Code Execution and DoS

First seen 8 Jun 2026, 21:23 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •June 9, 2026 at 21:00 UTC
  • •Poppler vulnerability allows code execution and denial of service via crafted PDF files.
  • •Affected Ubuntu versions include 26.04 LTS, 25.10, 24.04 LTS, and 22.04 LTS.
  • •Users must update their systems to mitigate the risk associated with this vulnerability.

A vulnerability in Poppler, a PDF rendering library, has been identified that could allow attackers to crash systems or execute arbitrary code by opening specially crafted PDF files. This flaw affects multiple Ubuntu releases, including 26.04 LTS, 25.10, 24.04 LTS, and 22.04 LTS. The vulnerability arises from Poppler's improper handling of malformed PDF tiling patterns in the Splash backend. Attackers may exploit this issue to gain access to sensitive information or cause a denial of service. Users are advised to update their systems to the latest package versions to mitigate the risk. A standard system update is sufficient to apply the necessary changes. The issue was disclosed in Ubuntu Security Notice USN-8400-1, published on June 8, 2026.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 104d ago How this analysis works

Timeline

2026-06-08
Poppler vulnerability disclosed
Ubuntu Security Notice USN-8400-1 details a critical vulnerability in Poppler affecting multiple Ubuntu releases.
Ubuntu
2026-06-08
Patch recommended for affected systems
Users are advised to update their systems to the latest package versions to address the vulnerability.
Linuxsecurity

More articles in this cluster (2)

Following this threat?

Track Ubuntu in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 2