PT-2026-34687 · Julia · Poppler Jll

Published 2026-04-13 · Updated 2026-04-13

OSV

A vulnerability in Outline.cc for Poppler prior to 23.06.0 allows a remote attacker to cause a Denial of Service (DoS) (crash) via a crafted PDF file in OutlineItem::open.

Related Identifiers

JLSEC-2026-82

Affected Products

Poppler Jll

References · 9

• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W3H3GOWFE3C7543GMEN7LY4GWMWJ7D2G · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JQ3NYJ43U2MA7COKGMJDARZUAAOP45D4 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/3XXL3L6RJOTLGCN7GLH2OLLNF4FJ4T7I · Vendor Advisory
• https://osv.dev/vulnerability/JLSEC-2026-82 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/JQ3NYJ43U2MA7COKGMJDARZUAAOP45D4 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3XXL3L6RJOTLGCN7GLH2OLLNF4FJ4T7I · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SFBT75QHBWNMSDAHSXZQ2I3PBJWID36K · Vendor Advisory
• https://gitlab.freedesktop.org/poppler/poppler/-/issues/1399 · Note
• https://gitlab.freedesktop.org/poppler/poppler/-/commit/591235c8b6c65a2eee88991b9ae73490fd9afdfe · Note