CVE-2026-107705: Stack-based Buffer Overflow in freedesktop poppler

CVE-2026-107705 is a stack-based buffer overflow vulnerability in the freedesktop Poppler library affecting versions 0.42.0 through 26.10.0. The vulnerability exists in the Decrypt::revision6Hash() function, which processes passwords for AESV3/R6 encrypted PDFs. Attackers can exploit this by providing a password longer than 127 bytes, leading to overflow of internal buffers (K1 and E) on the stack. This can result in application crashes or memory corruption when applications use libpoppler, libpoppler-glib, or the C++ API to open such PDFs.

An attacker who can supply a crafted password to an application using Poppler can cause a stack-based buffer overflow, leading to denial of service via process crashes or potential memory corruption. The vulnerability requires attacker control over the password input and does not require user interaction or privileges. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, avoid opening untrusted AESV3/R6 encrypted PDFs with affected Poppler versions or use alternative PDF processing tools that are not vulnerable.