CVE-2026-102621

A flaw was found in poppler. An integer overflow vulnerability exists in the SplashClip rendering component when handling path clipping operations. A local attacker could exploit this flaw by providing specially crafted input, causing the application to crash and resulting in a Denial of Service (DoS).

Red Hat rates this flaw as Low impact because exploitation requires a user to open a specially crafted PDF file, and the result is limited to crashing the rendering process with no data exposure or code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Do not open untrusted PDF files with applications that use the poppler library for rendering.