CVE-2026-8733 - Investintech SlimPDFReader SlimPDFReader.exe sub_3B4610 stack-based overflow

Back Back to CVE browser

MEDIUM

Investintech SlimPDFReader SlimPDFReader.exe sub_3B4610 stack-based overflow

Published May 17, 2026

5.3

MEDIUM

CVSS 4.0

EPSS 0.43%

Description

A vulnerability was found in Investintech SlimPDFReader up to 2.0.13. Affected by this vulnerability is the function sub_3B4610 of the file SlimPDFReader.exe. The manipulation results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor responded to the initial vulnerability report by the researcher with a note that the product is discontinued. This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

Vendor Investintech Product SlimPDFReader Default
n/a
- Version
  2.0.0
  Status
  affected
  Constraints
  -
- Version
  2.0.1
  Status
  affected
  Constraints
  -
- Version
  2.0.10
  Status
  affected
  Constraints
  -
- Version
  2.0.11
  Status
  affected
  Constraints
  -
- Version
  2.0.12
  Status
  affected
  Constraints
  -
- Version
  2.0.13
  Status
  affected
  Constraints
  -
- Version
  2.0.2
  Status
  affected
  Constraints
  -
- Version
  2.0.3
  Status
  affected
  Constraints
  -
- Version
  2.0.4
  Status
  affected
  Constraints
  -
- Version
  2.0.5
  Status
  affected
  Constraints
  -
- Version
  2.0.6
  Status
  affected
  Constraints
  -
- Version
  2.0.7
  Status
  affected
  Constraints
  -
- Version
  2.0.8
  Status
  affected
  Constraints
  -
- Version
  2.0.9
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Investintech

SlimPDFReader

n/a

Version	Status	Constraints
2.0.0	affected	-
2.0.1	affected	-
2.0.10	affected	-
2.0.11	affected	-
2.0.12	affected	-
2.0.13	affected	-
2.0.2	affected	-
2.0.3	affected	-
2.0.4	affected	-
2.0.5	affected	-
2.0.6	affected	-
2.0.7	affected	-
2.0.8	affected	-
2.0.9	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-121

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-30682
Advisory
https://sharing.sit.fraunhofer.de/s/RYcqZbGqgZXxab2
exploit
https://vuldb.com/submit/809300
exploitthird-party-advisory
https://vuldb.com/vuln/364321
vdb-entrytechnical-description
https://vuldb.com/vuln/364321/cti
signaturepermissions-required

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-30682		Advisory
https://sharing.sit.fraunhofer.de/s/RYcqZbGqgZXxab2		exploit
https://vuldb.com/submit/809300		exploitthird-party-advisory
https://vuldb.com/vuln/364321		vdb-entrytechnical-description
https://vuldb.com/vuln/364321/cti		signaturepermissions-required