Multiple vulnerabilities have been identified in Freedesktop Poppler version 26.07.0, a PDF rendering library. These include a null pointer dereference in JBIG2Stream::rewind, and integer overflows in JBIG2Stream::readCodeTableSeg and FoFiTrueType::mapCodeToGID. The vulnerabilities can be exploited remotely and public exploit code exists. Upgrading to version 23.12.0-15.oe2403sp1 or later addresses these issues.