OSV-2026-599

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/poppler/OSV-2026-599.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-599
Published
2026-04-21T00:03:42Z
Modified
2026-09-16T14:23:54Z
Summary
UNKNOWN READ in XRef::parseEntry
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=504271260

Crash type: UNKNOWN READ
Crash state:
XRef::parseEntry
XRef::getEntry
Parser::makeStream
References

Affected packages

OSS-Fuzz / poppler

Package

Name
poppler
Purl
pkg:generic/poppler

Affected ranges

Type
GIT
Repo
https://gitlab.freedesktop.org/poppler/poppler.git
Events
Introduced
05cff0459bbec6365aed65448b1a297dfbb98340
Fixed
2ec4523b1675a2723ca634eed2adf71197580062

Affected versions

poppler-26.*
poppler-26.04.0
poppler-26.05.0
poppler-26.06.0
poppler-26.07.0
poppler-26.08.0

Ecosystem specific 

{
    "severity":  "MEDIUM"
}

Database specific

fixed_range 
"4fc1c20f120ae93136381d7de0a68c3efe90f356:2ec4523b1675a2723ca634eed2adf71197580062"
introduced_range 
"13313aefb1558f1281a076151a03d5b90788e7e0:50e946472de31760a15497d457641210c576a46b"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/poppler/OSV-2026-599.yaml"