BSD PortsPoppler: integer overflow in tilingPatternFill
· CVE-2026-10118 · VuXML entry
https://access.redhat.com/errata/RHSA-2026:24984 reports: A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the `tilingPatternFill` function. This overflow leads to an undersized heap memory allocation, allowing a subsequent out-of-bounds write. Successful exploitation could result in …
Affected versions
- poppler, poppler-glib, poppler-qt5, poppler-qt6, poppler-utils < 26.04.0_1
By system
5 still vulnerable, 5 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| DragonFly | graphics/poppler | 25.02.0 | vulnerable since 2026-07-14 | |
| OpenBSD | print/poppler | 26.09.0 | out of range, by version | |
| NetBSD | print/poppler | 26.06.0nb3 | not listed | |
| MidnightBSD | graphics/poppler | 25.10.0_2 | in range, by version | |
| FreeBSD | graphics/poppler | 26.04.0_1 | fixed | |
| DragonFly | graphics/poppler-glib | 25.02.0 | vulnerable since 2026-07-14 | |
| MidnightBSD | graphics/poppler-glib | in range, by version | ||
| FreeBSD | graphics/poppler-glib | 26.04.0_1 | fixed | |
| DragonFly | graphics/poppler-qt5 | 25.02.0 | vulnerable since 2026-07-14 | |
| NetBSD | print/poppler-qt5 | 26.06.0nb2 | not listed | |
| MidnightBSD | graphics/poppler-qt5 | in range, by version | ||
| FreeBSD | graphics/poppler-qt5 | 26.04.0_1 | fixed | |
| DragonFly | graphics/poppler-qt6 | 25.02.0 | vulnerable since 2026-07-14 | |
| NetBSD | print/poppler-qt6 | 26.06.0nb2 | not listed | |
| MidnightBSD | graphics/poppler-qt6 | in range, by version | ||
| FreeBSD | graphics/poppler-qt6 | 26.04.0_1 | fixed | |
| DragonFly | graphics/poppler-utils | 25.02.0 | vulnerable since 2026-07-14 | |
| NetBSD | print/poppler-utils | 26.06.0nb2 | not listed | |
| MidnightBSD | graphics/poppler-utils | in range, by version | ||
| FreeBSD | graphics/poppler-utils | 26.04.0_1 | fixed |