The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in JBIG2Stream.cc because of a misplaced isOk check.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade poppler-develUpgrade poppler-cppUpgrade poppler-glib-docUpgrade poppler-qt5-develUpgrade poppler-utilsUpgrade poppler-qt5Upgrade popplerUpgrade poppler-glib-develUpgrade poppler-cpp-develUpgrade poppler-glib | Jan 8, 2026 | Jan 6, 2026 |
| Debian | — | Upgrade poppler | Apr 29, 2025 | Apr 5, 2025 |
| Oracle_linux | — | Upgrade poppler-qt6-develUpgrade poppler-glib-docUpgrade poppler-utilsUpgrade poppler-cpp-develUpgrade poppler-qt5Upgrade poppler-glibUpgrade poppler-qt5-develUpgrade poppler-glib-develUpgrade poppler-develUpgrade poppler-qt6Upgrade popplerUpgrade poppler-cpp | Jan 9, 2026 | Apr 5, 2025 |
| Redhat_linux | — | Upgrade poppler-utilsUpgrade poppler-qt5-develUpgrade poppler-qt6Upgrade poppler-cpp-debuginfoUpgrade poppler-develUpgrade poppler-qt5Upgrade poppler-glib-docUpgrade poppler-qt5-debuginfoUpgrade poppler-qt6-develUpgrade poppler-glib-debuginfoUpgrade poppler-qt6-debuginfoUpgrade poppler-cppUpgrade poppler-cpp-develNo solution existsUpgrade popplerUpgrade poppler-utils-debuginfoUpgrade poppler-debuginfoUpgrade poppler-debugsourceUpgrade poppler-glib-develUpgrade poppler-glib | Jul 9, 2025 | Apr 5, 2025 |
| Rocky_linux | — | Upgrade poppler-utilsUpgrade poppler-qt5Upgrade poppler-qt5-debuginfoUpgrade poppler-qt5-develUpgrade poppler-cppUpgrade poppler-debuginfoUpgrade poppler-cpp-develUpgrade poppler-cpp-debuginfoUpgrade poppler-develUpgrade poppler-utils-debuginfoUpgrade poppler-glib-debuginfoUpgrade poppler-debugsourceUpgrade poppler-glib-develUpgrade popplerUpgrade poppler-glib | Jan 8, 2026 | Jan 7, 2026 |
| Suse | — | Upgrade libpoppler89Upgrade libpoppler-glib8-32bitUpgrade libpoppler135Upgrade libpoppler-develUpgrade libpoppler-qt6-3Upgrade libpoppler-qt4-develUpgrade libpoppler-glib8Upgrade libpoppler-cpp0Upgrade libpoppler-glib-develUpgrade libpoppler-qt5-1Upgrade libpoppler-cpp2Upgrade libpoppler-qt4-4Upgrade libpoppler-qt6-develUpgrade libpoppler-qt5-develUpgrade poppler-toolsUpgrade libpoppler-cpp0-32bitUpgrade libpoppler-qt5-1-32bitUpgrade libpoppler148Upgrade typelib-1_0-Poppler-0_18Upgrade libpoppler60Upgrade libpoppler135-32bit | Dec 5, 2025 | May 30, 2025 |
| Ubuntu | — | Upgrade libpoppler118Upgrade libpoppler58 (Ubuntu Pro)Upgrade poppler-utils (Ubuntu Pro)Upgrade libpoppler140Upgrade poppler-utilsUpgrade libpoppler73 (Ubuntu Pro)Upgrade libpoppler134Upgrade libpoppler97 | Apr 9, 2025 | Apr 5, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub