compat-poppler022 vulnerabilities
CVEs whose affected-version data names the compat-poppler022 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-93653Medium· 5.5A denial of service flaw was found in Poppler's Splash backend
A denial of service flaw was found in Poppler's Splash backend. A crafted PDF with tiling-pattern geometry approaching the int32 boundary can cause SplashOutputDev::tilingPatternFill to compute an attacker-controlled repeat count that dr…
▾ SunlitRed Hat · popplerEPSS 0.15%via NVD
CVE-2026-10118High· 7.8A flaw was found in Poppler's Splash backend
A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the `tilingPatternFill` function. This overflow leads …
▾ TwilightRed Hat · popplerEPSS 0.25%via NVD