Sumatrapdfreader

Sumatrapdf

15 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2026-26054

  • EPSS 0.14%
  • Veröffentlicht 24.09.2026 16:48:03
  • Zuletzt bearbeitet 28.09.2026 16:17:14

SumatraPDF is a multi-format reader for Windows. Prior to 3.6, the MobiDoc::ParseHeader function in src/MobiDoc.cpp validates a record using kMobiHeaderMinLen but DecodeMobiDocHeader constructs a decoder sized for kMobiHeaderLen without receiving the...

6.6

CVE-2026-55586

  • EPSS -
  • Veröffentlicht 20.08.2026 16:35:07
  • Zuletzt bearbeitet 18.09.2026 20:09:01

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, a crafted CHM file can supply malformed LZX Huffman code lengths to make_decode_table in ext/CHMLib/lzx.c. In the long-code branch, the function writes new internal nodes through ...

7.5

CVE-2026-25961

Exploit
  • EPSS 0.45%
  • Veröffentlicht 09.02.2026 21:34:05
  • Zuletzt bearbeitet 20.02.2026 20:22:32

SumatraPDF is a multi-format reader for Windows. In 3.5.0 through 3.5.2, SumatraPDF's update mechanism disables TLS hostname verification (INTERNET_FLAG_IGNORE_CERT_CN_INVALID) and executes installers without signature checks. A network attacker with...

5.5

CVE-2026-25920

Exploit
  • EPSS 0.22%
  • Veröffentlicht 09.02.2026 21:32:26
  • Zuletzt bearbeitet 20.02.2026 20:22:56

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, a heap out-of-bounds read vulnerability exists in SumatraPDF's MOBI HuffDic decompressor. The bounds check in AddCdicData() only validates half the range that DecodeOne() actually...

7.8

CVE-2026-25880

Exploit
  • EPSS 0.19%
  • Veröffentlicht 09.02.2026 21:10:59
  • Zuletzt bearbeitet 23.02.2026 18:14:13

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, the PDF reader allows execution of a malicious binary (explorer.exe) located in the same directory as the opened PDF when the user clicks File → “Show in folder”. This behavior le...

5.5

CVE-2026-23951

Exploit
  • EPSS 0.19%
  • Veröffentlicht 22.01.2026 00:17:10
  • Zuletzt bearbeitet 17.02.2026 16:48:48

SumatraPDF is a multi-format reader for Windows. All versions contain an off-by-one error in the validation code that only triggers with exactly 2 records, causing an integer underflow in the size calculation. This bug exists in PalmDbReader::GetReco...

7.8

CVE-2026-23512

Exploit
  • EPSS 0.19%
  • Veröffentlicht 14.01.2026 20:31:08
  • Zuletzt bearbeitet 03.02.2026 17:56:29

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, there is a Untrusted Search Path vulnerability when Advanced Options setting is trigger. The application executes notepad.exe without specifying an absolute path when using the Ad...

7.3

CVE-2025-57248

Exploit
  • EPSS 0.24%
  • Veröffentlicht 15.09.2025 00:00:00
  • Zuletzt bearbeitet 20.09.2025 02:48:48

A null pointer dereference vulnerability was discovered in SumatraPDF 3.5.2 during the processing of a crafted .djvu file. When the file is opened, the application crashes inside libmupdf.dll, specifically in the DataPool::has_data() function.

5.5

CVE-2023-33802

Exploit
  • EPSS 0.32%
  • Veröffentlicht 26.07.2023 20:15:12
  • Zuletzt bearbeitet 21.11.2024 08:06:02

A buffer overflow in SumatraPDF Reader v3.4.6 allows attackers to cause a Denial of Service (DoS) via a crafted text file.

7.8

CVE-2012-5340

Exploit
  • EPSS 5.73%
  • Veröffentlicht 23.01.2020 22:15:09
  • Zuletzt bearbeitet 21.11.2024 01:44:32

SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file.