CVE-2026-25920

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, a heap out-of-bounds read vulnerability exists in SumatraPDF's MOBI HuffDic decompressor. The bounds check in AddCdicData only validates half the range that DecodeOne actually accesses. Opening a crafted .mobi file can read...

PT-2026-7171

Name of the Vulnerable Software and Affected Versions SumatraPDF versions 3.5.2 and earlier Description A heap out-of-bounds read issue exists in SumatraPDF's MOBI HuffDic decompressor. The bounds check within the AddCdicData function does not validate the complete range accessed by the DecodeOne...