SU
Vendor
sumatrapdfreader
26
CVEs
0
On KEV
11
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-107802 | SU sumatrapdf sumatrapdfreader | 7.1 | Oct 8 | SumatraPDF — Windows command-line argument injection in AI selection-translate |
| CVE-2026-107738 | SU sumatrapdf sumatrapdfreader | 6.8 | Oct 8 | SumatraPDF: Untrusted binary record offset used without lower-bound validation |
| CVE-2026-107737 | SU sumatrapdf sumatrapdfreader | 5.7 | Oct 8 | SumatraPDF CHM `its://` signed index causes an out-of-bounds object lookup |
| CVE-2026-107736 | SU sumatrapdf sumatrapdfreader | 6.8 | Oct 8 | SumatraPDF: stack buffer overflow while processing EXIF Orientation metadata |
| CVE-2026-107735 | SU sumatrapdf sumatrapdfreader | 5.4 | Oct 8 | SumatraPDF: `sumatrapdfrestrict.ini` never revokes any permission (fail-open policy initialization) |
| CVE-2026-107734 | SU sumatrapdf sumatrapdfreader | 7.1 | Oct 8 | SumatraPDF: SyncTeX Argument Injection in Inverse Search Enables Arbitrary Command Execution via External Editors |
| CVE-2026-107733 | SU sumatrapdf sumatrapdfreader | 6.8 | Oct 8 | SumatraPDF: Null-pointer dereference in `CmdExec` when no document tab is open |
| CVE-2026-107732 | SU sumatrapdf sumatrapdfreader | 8.4 | Oct 8 | SumatraPDF: Markup/command-link injection into UI notification text |
| CVE-2026-107731 | SU sumatrapdf sumatrapdfreader | 5.5 | Oct 8 | SumatraPDF: LIT parser range-validation flaws cause invalid-pointer reads and denial of service |
| CVE-2026-107730 | SU sumatrapdf sumatrapdfreader | 5.5 | Oct 8 | SumatraPDF: Signed integer overflow in the LIT header parsing causes invalid-pointer read |
| CVE-2026-107729 | SU sumatrapdf sumatrapdfreader | 5.5 | Oct 8 | SumatraPDF: Unsigned-to-signed hdrLen validation bypass in SumatraPDF MOBI parsing causes out-of-bounds read |
| CVE-2026-26054 | SU sumatrapdf sumatrapdfreader | 6.8 | Sep 24 | SumatraPDF: Heap out-of-bounds read in MOBI header parser. |
| CVE-2026-55586 | SU sumatrapdf sumatrapdfreader | 6.6 | Aug 20 | SumatraPDF: Heap out-of-bounds write in vendored CHMLib LZX Huffman table construction reachable from crafted CHM files |
| CVE-2026-25961 | SU sumatrapdf sumatrapdfreader | 7.5 | Feb 9 | SumatraPDF Update MITM -> Arbitrary Code Execution |
| CVE-2026-25920 | SU sumatrapdf sumatrapdfreader | 5.5 | Feb 9 | SumatraPDF has a heap out-of-bounds read in MOBI HuffDic decompressor |
| CVE-2026-25880 | SU sumatrapdf sumatrapdfreader | 7.8 | Feb 9 | Untrusted Search Path in SumatraPDF Reader (explorer.exe on Windows) |
| CVE-2026-23951 | SU sumatrapdf sumatrapdfreader | 5.5 | Jan 22 | SumatraPDF's Integer Underflow in PalmDbReader Leads to Crash |
| CVE-2026-23512 | SU sumatrapdf sumatrapdfreader | 7.8 | Jan 14 | SumatraPDF has an Untrusted Search Path in sumatrapdf/src/AppTools.cpp |
| CVE-2025-57248 | SU Sumatrapdf Sumatrapdfreader | 7.3 | Sep 15 | A null pointer dereference vulnerability was discovered in SumatraPDF 3.5.2 during the processing of a crafted .djvu file |
| CVE-2023-33802 | SU Sumatrapdf Sumatrapdfreader | 5.5 | Jul 26 | A buffer overflow in SumatraPDF Reader v3.4.6 allows attackers to cause a Denial of Service (DoS) via a crafted text file |
| CVE-2012-5340 | SU Sumatrapdf Sumatrapdfreader | 7.8 | Jan 23 | SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file |
| CVE-2013-2830 | SU Sumatrapdf Sumatrapdfreader | 7.8 | Feb 8 | Use-after-free vulnerability in SumatraPDF Reader 2.x before 2.2.1 allows remote attackers to execute arbitrary code via a crafted PDF file |
| CVE-2012-4896 | SU Sumatrapdf Sumatrapdfreader | – | Oct 5 | Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2012-4895 |
| CVE-2012-4895 | SU Sumatrapdf Sumatrapdfreader | – | Oct 5 | Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2012-4896 |
| CVE-2009-4117 | SU Sumatrapdf Sumatrapdfreader | – | Dec 1 | Multiple stack-based buffer overflows in pdf_shade4.c in MuPDF before commit 20091125231942, as used in SumatraPDF before 1.0.1, allow remote attackers to cause a denial of… |
| CVE-2009-1605 | SU Sumatrapdf Sumatrapdfreader | 5.4 | May 11 | Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdf_function.c in MuPDF in the mupdf-20090223-win32 package, as used in SumatraPDF 0.9.3 and earlier,… |