StackPatch is liveSee product

Back to CVE digest
CVE-2026-10118 · cross-distro fix matrix

CVE-2026-10118: It was discovered that poppler incorrectly handled certain malformed PDF

Affects 4 Linux releases across 50 (distro × package) combinations. First disclosed: 2026-06-01.

CVSS v3:HIGH · 7.8(NVD-published)

Fix per ecosystem

Each block below is a distro release where CVE-2026-10118 has a known fix. Run the listed command on that distro to remediate.

Ubuntu jammy

Source: Ubuntu USN

  • poppler→ fixed in22.02.0-2ubuntu0.13USN-8400-1
    sudo apt-get install --only-upgrade -y poppler
  • gir1.2-poppler-0.18→ fixed in22.02.0-2ubuntu0.13USN-8400-1
    sudo apt-get install --only-upgrade -y gir1.2-poppler-0.18
  • libpoppler-cpp-dev→ fixed in22.02.0-2ubuntu0.13USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-cpp-dev
  • libpoppler-cpp0v5→ fixed in22.02.0-2ubuntu0.13USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-cpp0v5
  • libpoppler-dev→ fixed in22.02.0-2ubuntu0.13USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-dev
  • libpoppler-glib-dev→ fixed in22.02.0-2ubuntu0.13USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-glib-dev
  • libpoppler-glib-doc→ fixed in22.02.0-2ubuntu0.13USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-glib-doc
  • libpoppler-glib8→ fixed in22.02.0-2ubuntu0.13USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-glib8
  • libpoppler-private-dev→ fixed in22.02.0-2ubuntu0.13USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-private-dev
  • libpoppler-qt5-1→ fixed in22.02.0-2ubuntu0.13USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-qt5-1
  • libpoppler-qt5-dev→ fixed in22.02.0-2ubuntu0.13USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-qt5-dev
  • libpoppler118→ fixed in22.02.0-2ubuntu0.13USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler118
  • poppler-utils→ fixed in22.02.0-2ubuntu0.13USN-8400-1
    sudo apt-get install --only-upgrade -y poppler-utils

Ubuntu noble

Source: Ubuntu USN

  • poppler→ fixed in24.02.0-1ubuntu9.9USN-8400-1
    sudo apt-get install --only-upgrade -y poppler
  • gir1.2-poppler-0.18→ fixed in24.02.0-1ubuntu9.9USN-8400-1
    sudo apt-get install --only-upgrade -y gir1.2-poppler-0.18
  • libpoppler-cpp-dev→ fixed in24.02.0-1ubuntu9.9USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-cpp-dev
  • libpoppler-cpp0t64→ fixed in24.02.0-1ubuntu9.9USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-cpp0t64
  • libpoppler-dev→ fixed in24.02.0-1ubuntu9.9USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-dev
  • libpoppler-glib-dev→ fixed in24.02.0-1ubuntu9.9USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-glib-dev
  • libpoppler-glib-doc→ fixed in24.02.0-1ubuntu9.9USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-glib-doc
  • libpoppler-glib8t64→ fixed in24.02.0-1ubuntu9.9USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-glib8t64
  • libpoppler-private-dev→ fixed in24.02.0-1ubuntu9.9USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-private-dev
  • libpoppler-qt5-1t64→ fixed in24.02.0-1ubuntu9.9USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-qt5-1t64
  • libpoppler-qt5-dev→ fixed in24.02.0-1ubuntu9.9USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-qt5-dev
  • libpoppler-qt6-3t64→ fixed in24.02.0-1ubuntu9.9USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-qt6-3t64
  • libpoppler-qt6-dev→ fixed in24.02.0-1ubuntu9.9USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-qt6-dev
  • libpoppler134→ fixed in24.02.0-1ubuntu9.9USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler134
  • poppler-utils→ fixed in24.02.0-1ubuntu9.9USN-8400-1
    sudo apt-get install --only-upgrade -y poppler-utils

Ubuntu questing

Source: Ubuntu USN

  • poppler→ fixed in25.03.0-10ubuntu0.2USN-8400-1
    sudo apt-get install --only-upgrade -y poppler
  • gir1.2-poppler-0.18→ fixed in25.03.0-10ubuntu0.2USN-8400-1
    sudo apt-get install --only-upgrade -y gir1.2-poppler-0.18
  • libpoppler-cpp-dev→ fixed in25.03.0-10ubuntu0.2USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-cpp-dev
  • libpoppler-cpp2→ fixed in25.03.0-10ubuntu0.2USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-cpp2
  • libpoppler-dev→ fixed in25.03.0-10ubuntu0.2USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-dev
  • libpoppler-glib-dev→ fixed in25.03.0-10ubuntu0.2USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-glib-dev
  • libpoppler-glib-doc→ fixed in25.03.0-10ubuntu0.2USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-glib-doc
  • libpoppler-glib8t64→ fixed in25.03.0-10ubuntu0.2USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-glib8t64
  • libpoppler-private-dev→ fixed in25.03.0-10ubuntu0.2USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-private-dev
  • libpoppler-qt5-1t64→ fixed in25.03.0-10ubuntu0.2USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-qt5-1t64
  • libpoppler-qt5-dev→ fixed in25.03.0-10ubuntu0.2USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-qt5-dev
  • libpoppler-qt6-3t64→ fixed in25.03.0-10ubuntu0.2USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-qt6-3t64
  • libpoppler-qt6-dev→ fixed in25.03.0-10ubuntu0.2USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-qt6-dev
  • libpoppler147→ fixed in25.03.0-10ubuntu0.2USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler147
  • poppler-utils→ fixed in25.03.0-10ubuntu0.2USN-8400-1
    sudo apt-get install --only-upgrade -y poppler-utils

Ubuntu resolute

Source: Ubuntu USN

  • poppler→ fixed in26.01.0-2ubuntu0.1USN-8400-1
    sudo apt-get install --only-upgrade -y poppler
  • gir1.2-poppler-0.18→ fixed in26.01.0-2ubuntu0.1USN-8400-1
    sudo apt-get install --only-upgrade -y gir1.2-poppler-0.18
  • libpoppler-cpp-dev→ fixed in26.01.0-2ubuntu0.1USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-cpp-dev
  • libpoppler-cpp3→ fixed in26.01.0-2ubuntu0.1USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-cpp3
  • libpoppler-dev→ fixed in26.01.0-2ubuntu0.1USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-dev
  • libpoppler-glib-dev→ fixed in26.01.0-2ubuntu0.1USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-glib-dev
  • libpoppler-glib-doc→ fixed in26.01.0-2ubuntu0.1USN-8400-1
    sudo apt-get install --only-upgrade -y libpoppler-glib-doc
Are YOU affected by CVE-2026-10118?

5-second check on your actual server. Reads /etc/os-release, uname -r, and the distro's package manager; matches against this same cross-source index live.

curl https://mindsparkstack.com/scan.sh | bash
Continuous monitoring beats manual checking

CVE-2026-10118dropped silently in your distro's update channel. Every new CVE is the same story. StackPatch runs the matcher hourly against all 5 sources and emails the exact remediation when something new applies to one of your servers. $99 lifetime, 50 founder seats, 30-day refund.

See StackPatch ($99 lifetime)