SU
Product
sumatrapdf
by sumatrapdfreader · last CVE Oct 8, 2026
26
CVEs
0
On KEV
8.4
Max CVSS
11
New 30D
Severity mix
Critical 0High 9Medium 14Low 0
Watch

Add sumatrapdf to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-107738
6.8
0%
Oct 8
SumatraPDF: Untrusted binary record offset used without lower-bound validation
Affected: <= 3.6.1
CVE-2026-107736
6.8
0%
Oct 8
SumatraPDF: stack buffer overflow while processing EXIF Orientation metadata
Affected: <= 3.6.1
CVE-2026-107733
6.8
0%
Oct 8
SumatraPDF: Null-pointer dereference in `CmdExec` when no document tab is open
Affected: <= 3.6.1
CVE-2026-26054
6.8
0%
Sep 24
SumatraPDF: Heap out-of-bounds read in MOBI header parser.
Affected: < 3.6
CVE-2026-55586
6.6
0%
Aug 20
SumatraPDF: Heap out-of-bounds write in vendored CHMLib LZX Huffman table construction reachable from crafted CHM files
Affected: <= 3.6.1rel
CVE-2026-107737
5.7
0%
Oct 8
SumatraPDF CHM `its://` signed index causes an out-of-bounds object lookup
Affected: <= 3.6.1
CVE-2026-107731
5.5
0%
Oct 8
SumatraPDF: LIT parser range-validation flaws cause invalid-pointer reads and denial of service
Affected: <= 3.7.0.22298
CVE-2026-107730
5.5
0%
Oct 8
SumatraPDF: Signed integer overflow in the LIT header parsing causes invalid-pointer read
Affected: <= 3.7.0.22298
CVE-2026-107729
5.5
0%
Oct 8
SumatraPDF: Unsigned-to-signed hdrLen validation bypass in SumatraPDF MOBI parsing causes out-of-bounds read
Affected: <= 3.7.0.22298
CVE-2026-25920
5.5
0%
Feb 9
SumatraPDF has a heap out-of-bounds read in MOBI HuffDic decompressor
Affected: <= 3.5.2
CVE-2026-23951
5.5
0%
Jan 22
SumatraPDF's Integer Underflow in PalmDbReader Leads to Crash
Affected: <= 3.5.2rel
CVE-2023-33802
5.5
0%
Jul 26
A buffer overflow in SumatraPDF Reader v3.4.6 allows attackers to cause a Denial of Service (DoS) via a crafted text file
Affected: 3.4.6
CVE-2026-107735
5.4
0%
Oct 8
SumatraPDF: `sumatrapdfrestrict.ini` never revokes any permission (fail-open policy initialization)
Affected: <= 3.6.1
CVE-2009-1605
5.4
3%
May 11
Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdf_function.c in MuPDF in the mupdf-20090223-win32 package, as used in SumatraPDF 0.9.3 and earlier,…
Affected: through 0.9.3; 0.1; 0.2; 0.3; 0.4; 0.5; +7 more
Showing 14