An integer overflow in Poppler's `SplashOutputDev::tilingPatternFill` function (CVE-2026-10118) leads to a heap buffer overflow via unchecked dimension multiplication when processing PDF files. The advisory is rated Important, but a specific CVSS score is not provided in this text. The fix is contained in poppler package version 20.11.0-7.el8_8.1 for Red Hat Enterprise Linux 8.8 Extended Update Support, Update Services for SAP Solutions, and Telecommunications Update Service.
Red Hat Product Errata RHSA-2026:27724 - Security Advisory Issued: 2026-06-22 Updated: 2026-06-22 RHSA-2026:27724 - Security Advisory Overview Updated Packages Synopsis Important: poppler security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for poppler is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince. Security Fix(es): poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication (CVE-2026-10118) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 x86_64 Red Hat Enterprise Linux Server - TUS 8.8 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64 Fixes BZ - 2460428 - CVE-2026-10118 poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication CVEs CVE-2026-10118 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 SRPM poppler-20.11.0-7.el8_8.1.src.rpm SHA-256: 3330ef34a915c33c955207e2c8d152d85f18320ce47fe2450fb132a2ba64817c x86_64 poppler-20.11.0-7.el8_8.1.i686.rpm SHA-256: 14ddfffd90e9278f240d0aa320e3f7cbe5b2bc8c7e3010ebfa7f0c044216c9dd poppler-20.11.0-7.el8_8.1.x86_64.rpm SHA-256: 01eb795fd1d87f40eeffb1ef1dd0cdf4fc532c4d1ecfd250ce003e08d2a87ab4 poppler-cpp-debuginfo-20.11.0-7.el8_8.1.i686.rpm SHA-256: 5e4eb1dc063c1407bce9c41da414af42af2a9b24be81d4fd42a9f549df26ac2e poppler-cpp-debuginfo-20.11.0-7.el8_8.1.x86_64.rpm SHA-256: 8dc981d1b9b53747a49c20cde62465b754331128ab8692141680585355622698 poppler-debuginfo-20.11.0-7.el8_8.1.i686.rpm SHA-256: 880d14d27c79c601a6c930f0fd0c38e7624e0130eee146920f2afab9e60c9102 poppler-debuginfo-20.11.0-7.el8_8.1.x86_64.rpm SHA-256: 8daed99754bddb95516df51586227e4bd738ffb8f22c18a9b5cc5639594f4088 poppler-debugsource-20.11.0-7.el8_8.1.i686.rpm SHA-256: 8208d4e60f2a3cac4b3231d811d6b6949a617cc3366268bb4f444bcdcb3217e3 poppler-debugsource-20.11.0-7.el8_8.1.x86_64.rpm SHA-256: 14d5c99f1b2349e0cb200eb6207ddb8c97f71c5efd8a83e0f8c4bf5e043cf94e poppler-glib-20.11.0-7.el8_8.1.i686.rpm SHA-256: c6200d24bfd2946cf73b48f67d6db8b5e8cdfcd76837c4c22f02d61a72b53cfa poppler-glib-20.11.0-7.el8_8.1.x86_64.rpm SHA-256: dca60574aee43bdec1ae2587b34088f13e79ba60c715b57a36b3e62b9b1b7aff poppler-glib-debuginfo-20.11.0-7.el8_8.1.i686.rpm SHA-256: c4751576f745ccddcf446f56c2ab7f8643c2c8e6040b3fb6fad39ebe4dc5ccfb poppler-glib-debuginfo-20.11.0-7.el8_8.1.x86_64.rpm SHA-256: 0d429c8f38de162adfbd429f6cf760b5a69efb56a6126628e77b4db8589b8c95 poppler-qt5-20.11.0-7.el8_8.1.i686.rpm SHA-256: c76100750278a5bba93a21223a0cab89cae001ea2884dd3e6f8a7fd7019201f7 poppler-qt5-20.11.0-7.el8_8.1.x86_64.rpm SHA-256: b9afa905f729a832ca6973ff864841254b6363a5d6e1901a59ebc27c522626c3 poppler-qt5-debuginfo-20.11.0-7.el8_8.1.i686.rpm SHA-256: 558993a1c16aed69af71dfb3d9d1391d69a30f7deecd0cf56f53a6c46709510d poppler-qt5-debuginfo-20.11.0-7.el8_8.1.x86_64.rpm SHA-256: 2ef0172e26088edaccb7c214e7d1b9b77a4d524ecac90ac9489f082dd7931b5e poppler-utils-20.11.0-7.el8_8.1.x86_64.rpm SHA-256: 8afc6f428ffdf4639371857708f8f2c277d111fabe2dfb93171dff91417572c4 poppler-utils-debuginfo-20.11.0-7.el8_8.1.i686.rpm SHA-256: 2284243a6098a326a4cadeed0583e4de25a054871d5704e95ddc2aa4f694a11a poppler-utils-debuginfo-20.11.0-7.el8_8.1.x86_64.rpm SHA-256: a456cc2dbdab753b0a66749ae802b50cb80069039e0b6c5a677f0a77ab6ba80e Red Hat Enterprise Linux Server - TUS 8.8 SRPM poppler-20.11.0-7.el8_8.1.src.rpm SHA-256: 3330ef34a915c33c955207e2c8d152d85f18320ce47fe2450fb132a2ba64817c x86_64 poppler-20.11.0-7.el8_8.1.i686.rpm SHA-256: 14ddfffd90e9278f240d0aa320e3f7cbe5b2bc8c7e3010ebfa7f0c044216c9dd poppler-20.11.0-7.el8_8.1.x86_64.rpm SHA-256: 01eb795fd1d87f40eeffb1ef1dd0cdf4fc532c4d1ecfd250ce003e08d2a87ab4 poppler-cpp-debuginfo-20.11.0-7.el8_8.1.i686.rpm SHA-256: 5e4eb1dc063c1407bce9c41da414af42af2a9b24be81d4fd42a9f549df26ac2e poppler-cpp-debuginfo-20.11.0-7.el8_8.1.x86_64.rpm SHA-256: 8dc981d1b9b53747a49c20cde62465b754331128ab8692141680585355622698 poppler-debuginfo-20.11.0-7.el8_8.1.i686.rpm SHA-256: 880d14d27c79c601a6c930f0fd0c38e7624e0130eee146920f2afab9e60c9102 poppler-debuginfo-20.11.0-7.el8_8.1.x86_64.rpm SHA-256: 8daed99754bddb95516df51586227e4bd738ffb8f22c18a9b5cc5639594f4088 poppler-debugsource-20.11.0-7.el8_8.1.i686.rpm SHA-256: 8208d4e60f2a3cac4b3231d811d6b6949a617cc3366268bb4f444bcdcb3217e3 poppler-debugsource-20.11.0-7.el8_8.1.x86_64.rpm SHA-256: 14d5c99f1b2349e0cb200eb6207ddb8c97f71c5efd8a83e0f8c4bf5e043cf94e poppler-glib-20.11.0-7.el8_8.1.i686.rpm SHA-256: c6200d24bfd2946cf73b48f67d6db8b5e8cdfcd76837c4c22f02d61a72b53cfa poppler-glib-20.11.0-7.el8_8.1.x86_64.rpm SHA-256: dca60574aee43bdec1ae2587b34088f13e79ba60c715b57a36b3e62b9b1b7aff poppler-glib-debuginfo-20.11.0-7.el8_8.1.i686.rpm SHA-256: c4751576f745ccddcf446f56c2ab7f8643c2c8e6040b3fb6fad39ebe4dc5ccfb poppler-glib-debuginfo-20.11.0-7.el8_8.1.x86_64.rpm SHA-256: 0d429c8f38de162adfbd429f6cf760b5a69efb56a6126628e77b4db8589b8c95 poppler-qt5-20.11.0-7.el8_8.1.i686.rpm SHA-256: c76100750278a5bba93a21223a0cab89cae001ea2884dd3e6f8a7fd7019201f7 poppler-qt5-20.11.0-7.el8_8.1.x86_64.rpm SHA-256: b9afa905f729a832ca6973ff864841254b6363a5d6e1901a59ebc27c522626c3 poppler-qt5-debuginfo-20.11.0-7.el8_8.1.i686.rpm SHA-256: 558993a1c16aed69af71dfb3d9d1391d69a30f7deecd0cf56f53a6c46709510d poppler-qt5-debuginfo-20.11.0-7.el8_8.1.x86_64.rpm SHA-256: 2ef0172e26088edaccb7c214e7d1b9b77a4d524ecac90ac9489f082dd7931b5e poppler-utils-20.11.0-7.el8_8.1.x86_64.rpm SHA-256: 8afc6f428ffdf4639371857708f8f2c277d111fabe2dfb93171dff91417572c4 poppler-utils-debuginfo-20.11.0-7.el8_8.1.i686.rpm SHA-256: 2284243a6098a326a4cadeed0583e4de25a054871d5704e95ddc2aa4f694a11a poppler-utils-debuginfo-20.11.0-7.el8_8.1.x86_64.rpm SHA-256: a456cc2dbdab753b0a66749ae802b50cb80069039e0b6c5a677f0a77ab6ba80e Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 SRPM poppler-20.11.0-7.el8_8.1.src.rpm SHA-256: 3330ef34a915c33c955207e2c8d152d85f18320ce47fe2450fb132a2ba64817c ppc64le poppler-20.11.0-7.el8_8.1.ppc64le.rpm SHA-256: fcd500c293bd4496f81b22efcdb93b32baaae6a6ef2969a333eb070bcb64e014 poppler-cpp-debuginfo-20.11.0-7.el8_8.1.ppc64le.rpm SHA-256: 12fb54822060255d00638c4b8c43a01af5b725f16f74d09477f0ddd7b4e946c4 poppler-debuginfo-20.11.0-7.el8_8.1.ppc64le.rpm SHA-256: da98ff5580603d12002c5d8423712a96ad3e8dea0e28221b77476cd4199cf529 poppler-debugsource-20.11.0-7.el8_8.1.ppc64le.rpm SHA-256: 040d7579852633fe84fa6ead5dac9bcdcdbfc723cc5f946d1a001cd445145630 poppler-glib-20.11.0-7.el8_8.1.ppc64le.rpm SHA-256: fad70f8410becc384480882416d181d83f922f851001de78457f205ff9131d71 poppler-glib-debuginfo-20.11.0-7.el8_8.1.ppc64le.rpm SHA-256: 0d18644410c2d8d8eb9bad8b73d96aea3efdec916bee9f1467c9009e9cb91a6a poppler-qt5-20.11.0-7.el8_8.1.ppc64le.rpm SHA-256: 849e78c8aa334b153e91fc1abad359ac88751ef5784e6bc2529c64c24c388d27 poppler-qt5-debuginfo-20.11.0-7.el8_8.1.ppc64le.rpm SHA-256: bd17113daa90aa0506a33fc24e77682b38fdb152580424b398d527a3f36dc99e poppler-utils-20.11.0-7.el8_8.1.ppc64le.rpm SHA-256: 2b77c06e8d9b185614ccb60e663d96c45ad269f1dfa3faf2ea4a9b945ad5c013 poppler-utils-debuginfo-20.11.0-7.el8_8.1.ppc64le.rpm SHA-256: 91308eb3ed994f5f599f112f446e83739fe5b9c30e42945b4397f41072ff72c7 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 SRPM poppler-20.11.0-7.el8_8.1.src.rpm SHA-256: 3330ef34a915c33c955207e2c8d152d85f18320ce47fe2450fb132a2ba64817c x86_64 poppler-20.11.0-7.el8_8.1.i686.rpm SHA-256: 14ddfffd90e9278f240d0aa320e3f7cbe5b2bc8c7e3010ebfa7f0c044216c9dd poppler-20.11.0-7.el8_8.1.x86_64.rpm SHA-256: 01eb795fd1d87f40eeffb1ef1dd0cdf4fc532c4d1ecfd250ce003e08d2a87ab4 poppler-cpp-debuginfo-20.11.0-7.el8_8.1.i686.rpm SHA-256: 5e4eb1dc063c1407bce9c41da414af42af2a9b24be81d4fd42a9f549df26ac2e poppler-cpp-debuginfo-20.11.0-7.el8_8.1.x86_64.rpm SHA-256: 8dc981d1b9b53747a49c20cde62465b754331128ab8692141680585355622698 poppler-debuginfo-20.11.0-7.el8_8.1.i686.rpm SHA-256: 880d14d27c79c601a6c930f0fd0c38e7624e0130eee146920f2afab9e60c9102 poppler-debuginfo-20.11.0-7.el8_8.1.x86_64.rpm SHA-256: 8daed99754bddb95516df51586227e4bd738ffb8f22c18a9b5cc5639594f4088 poppler-debugsource-20.11.0-7.el8_8.1.i686.rpm SHA-256: 8208d4e60f2a3cac4b3231d811d6b6949a617cc3366268bb4f444bcdcb3217e3 poppler-debugsource-20.11.0-7.el8_8.1.x86_64.rpm SHA-256: 14d5c99f1b2349e0cb200eb6207ddb8c97f71c5efd8a83e0f8c4bf5e043cf94e poppler-glib-20.11.0-7.el8_8.1.i686.rpm SHA-256: c6200d24bfd2946cf73b48f67d6db8b5e8cdfcd76837c4c22f02d61a72b53cfa poppler-glib-20.11.0-7.el8_8.1.x86_64.rpm SHA-256: dca60574aee43bdec1ae2587b34088f13e79ba60c715b57a36b3e62b9b1b7aff poppler-glib-debuginfo-20.11.0-7.el8_8.1.i686.rpm SHA-256: c4751576f745ccddcf446f56c2ab7f8643c2c8e6040b3fb6fad39ebe4dc5ccfb poppler-glib-de