Homepage

Integer Overflow or Wraparound The advisory has been revoked - it doesn't affect any version of package poppler-qt4  (opens in a new tab)

Threat Intelligence

EPSS
0.25% (17th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-CENTOS6-POPPLERQT4-17133037
  • published2 Jun 2026
  • disclosed1 Jun 2026
Report a new vulnerability Found a mistake?

Introduced: 1 Jun 2026

CVE-2026-10118  (opens in a new tab)
CWE-190  (opens in a new tab)

Amendment

The Centos security team deemed this advisory irrelevant for Centos:6.

NVD Description

Note: Versions mentioned in the description apply only to the upstream poppler-qt4 package and not the poppler-qt4 package as distributed by Centos.

A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the tilingPatternFill function. This overflow leads to an undersized heap memory allocation, allowing a subsequent out-of-bounds write. Successful exploitation could result in arbitrary code execution, information disclosure, or denial of service within the context of the application processing the PDF.

References