OSV-2026-599

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/poppler/OSV-2026-599.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-599
Published
2026-04-21T00:03:42.306278Z
Modified
2026-08-06T14:24:18.579824Z
Summary
UNKNOWN READ in XRef::parseEntry
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=504271260

Crash type: UNKNOWN READ
Crash state:
XRef::parseEntry
XRef::getEntry
Parser::makeStream
References

Affected packages

OSS-Fuzz / poppler

Package

Name
poppler
Purl
pkg:generic/poppler

Affected ranges

Type
GIT
Repo
https://gitlab.freedesktop.org/poppler/poppler.git
Events
Introduced
05cff0459bbec6365aed65448b1a297dfbb98340

Affected versions

poppler-26.*
poppler-26.04.0
poppler-26.05.0
poppler-26.06.0
poppler-26.07.0
poppler-26.08.0

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

introduced_range 
"13313aefb1558f1281a076151a03d5b90788e7e0:50e946472de31760a15497d457641210c576a46b"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/poppler/OSV-2026-599.yaml"