Sumatrapdfreader / Sumatrapdf
15 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-26054 | SumatraPDF: Heap out-of-bounds read in MOBI header parser. | MEDIUM | 6.8 | Sep 24, 2026 |
| CVE-2026-55586 | SumatraPDF: Heap out-of-bounds write in vendored CHMLib LZX Huffman table construction reachable from crafted CHM files | MEDIUM | 6.6 | Aug 20, 2026 |
| CVE-2026-25961 | SumatraPDF Update MITM -> Arbitrary Code Execution | HIGH | 7.5 | Feb 9, 2026 |
| CVE-2026-25920 | SumatraPDF has a heap out-of-bounds read in MOBI HuffDic decompressor | MEDIUM | 5.5 | Feb 9, 2026 |
| CVE-2026-25880 | Untrusted Search Path in SumatraPDF Reader (explorer.exe on Windows) | HIGH | 7.8 | Feb 9, 2026 |
| CVE-2026-23951 | SumatraPDF's Integer Underflow in PalmDbReader Leads to Crash | MEDIUM | 5.5 | Jan 22, 2026 |
| CVE-2026-23512 | SumatraPDF has an Untrusted Search Path in sumatrapdf/src/AppTools.cpp | HIGH | 8.6 | Jan 14, 2026 |
| CVE-2025-57248 | A null pointer dereference vulnerability was discovered in SumatraPDF 3.5.2 during the processing of a crafted .djvu file. When the file is opened, the applica… | HIGH | 7.3 | Sep 15, 2025 |
| CVE-2023-33802 | A buffer overflow in SumatraPDF Reader v3.4.6 allows attackers to cause a Denial of Service (DoS) via a crafted text file. | MEDIUM | 5.5 | Jul 26, 2023 |
| CVE-2012-5340 | SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file. | HIGH | 7.8 | Jan 23, 2020 |
| CVE-2013-2830 | Use-after-free vulnerability in SumatraPDF Reader 2.x before 2.2.1 allows remote attackers to execute arbitrary code via a crafted PDF file. | HIGH | 7.8 | Feb 8, 2018 |
| CVE-2012-4896 | Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability tha… | HIGH | 9.3 | Oct 5, 2012 |
| CVE-2012-4895 | Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability tha… | HIGH | 9.3 | Oct 5, 2012 |
| CVE-2009-4117 | Multiple stack-based buffer overflows in pdf_shade4.c in MuPDF before commit 20091125231942, as used in SumatraPDF before 1.0.1, allow remote attackers to caus… | HIGH | 9.3 | Dec 1, 2009 |
| CVE-2009-1605 | Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdf_function.c in MuPDF in the mupdf-20090223-win32 package, as used in SumatraPDF 0.9.… | MEDIUM | 5.4 | May 11, 2009 |
Showing 1 to 15 of 15 CVEs