SU
Product
sumatrapdf
26
CVEs
0
On KEV
8.4
Max CVSS
11
New 30D
Severity mix
Critical 0High 9Medium 14Low 0
Watch
Add sumatrapdf to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-107738 | 6.8 | Oct 8 | SumatraPDF: Untrusted binary record offset used without lower-bound validation Affected: <= 3.6.1 |
| CVE-2026-107736 | 6.8 | Oct 8 | SumatraPDF: stack buffer overflow while processing EXIF Orientation metadata Affected: <= 3.6.1 |
| CVE-2026-107733 | 6.8 | Oct 8 | SumatraPDF: Null-pointer dereference in `CmdExec` when no document tab is open Affected: <= 3.6.1 |
| CVE-2026-26054 | 6.8 | Sep 24 | SumatraPDF: Heap out-of-bounds read in MOBI header parser. Affected: < 3.6 |
| CVE-2026-55586 | 6.6 | Aug 20 | SumatraPDF: Heap out-of-bounds write in vendored CHMLib LZX Huffman table construction reachable from crafted CHM files Affected: <= 3.6.1rel |
| CVE-2026-107737 | 5.7 | Oct 8 | SumatraPDF CHM `its://` signed index causes an out-of-bounds object lookup Affected: <= 3.6.1 |
| CVE-2026-107731 | 5.5 | Oct 8 | SumatraPDF: LIT parser range-validation flaws cause invalid-pointer reads and denial of service Affected: <= 3.7.0.22298 |
| CVE-2026-107730 | 5.5 | Oct 8 | SumatraPDF: Signed integer overflow in the LIT header parsing causes invalid-pointer read Affected: <= 3.7.0.22298 |
| CVE-2026-107729 | 5.5 | Oct 8 | SumatraPDF: Unsigned-to-signed hdrLen validation bypass in SumatraPDF MOBI parsing causes out-of-bounds read Affected: <= 3.7.0.22298 |
| CVE-2026-25920 | 5.5 | Feb 9 | SumatraPDF has a heap out-of-bounds read in MOBI HuffDic decompressor Affected: <= 3.5.2 |
| CVE-2026-23951 | 5.5 | Jan 22 | SumatraPDF's Integer Underflow in PalmDbReader Leads to Crash Affected: <= 3.5.2rel |
| CVE-2023-33802 | 5.5 | Jul 26 | A buffer overflow in SumatraPDF Reader v3.4.6 allows attackers to cause a Denial of Service (DoS) via a crafted text file Affected: 3.4.6 |
| CVE-2026-107735 | 5.4 | Oct 8 | SumatraPDF: `sumatrapdfrestrict.ini` never revokes any permission (fail-open policy initialization) Affected: <= 3.6.1 |
| CVE-2009-1605 | 5.4 | May 11 | Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdf_function.c in MuPDF in the mupdf-20090223-win32 package, as used in SumatraPDF 0.9.3 and earlier,… Affected: through 0.9.3; 0.1; 0.2; 0.3; 0.4; 0.5; +7 more |
Showing 14
