Critical Poppler Vulnerability in Ubuntu Allows Code Execution and DoS

A vulnerability in Poppler, a PDF rendering library, has been identified that could allow attackers to crash systems or execute arbitrary code by opening specially crafted PDF files. This flaw affects multiple Ubuntu releases, including 26.04 LTS, 25.10, 24.04 LTS, and 22.04 LTS. The vulnerability arises from Poppler's improper handling of malformed PDF tiling patterns in the Splash backend. Attackers may exploit this issue to gain access to sensitive information or cause a denial of service. Users are advised to update their systems to the latest package versions to mitigate the risk. A standard system update is sufficient to apply the necessary changes. The issue was disclosed in Ubuntu Security Notice USN-8400-1, published on June 8, 2026.

Key Points: • Poppler vulnerability allows code execution and denial of service via crafted PDF files. • Affected Ubuntu versions include 26.04 LTS, 25.10, 24.04 LTS, and 22.04 LTS. • Users must update their systems to mitigate the risk associated with this vulnerability.