The vulnerability in the `makeDecodeTable` function of the `ext/CHMLib/lzx.c` file, a program for viewing documents in formats such as PDF, EPUB, MOBI, FB2, CHM, XPS, and DjVu using SumatraPDF, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the makeDecodeTable function in the ext/CHMLib/lzx.c file of the SumatraPDF program, which is used to display documents in formats such as PDF, EPUB, MOBI, FB2, CHM, XPS, and DjVu, relates to the execution of operations outside of the buffer. Exploiting this vulnerability cou...

CVE-2026-55586 SumatraPDF: Heap out-of-bounds write in vendored CHMLib LZX Huffman table construction reachable from crafted CHM files

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, a crafted CHM file can supply malformed LZX Huffman code lengths to makedecodetable in ext/CHMLib/lzx.c. In the long-code branch, the function writes new internal nodes through nextsymbol before validating that the canonical...

CVE-2026-55586 SumatraPDF: Heap out-of-bounds write in vendored CHMLib LZX Huffman table construction reachable from crafted CHM files

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, a crafted CHM file can supply malformed LZX Huffman code lengths to makedecodetable in ext/CHMLib/lzx.c. In the long-code branch, the function writes new internal nodes through nextsymbol before validating that the canonical...

EUVD-2005-2930

Malware in sbrugna...

EUVD-2025-20018

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-48172

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chmlib.c chmdecompressblock integer overflow. There is a resultant heap-based buffer...

chmlib-devel-0.40-26.1 on GA media (moderate)

chmlib-devel-0.40-26.1 on GA media Announcement ID: openSUSE-SU-2025:15326-1 Rating: moderate Cross-References: CVE-2025-48172 CVSS scores: CVE-2025-48172 SUSE : 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2025-48172 SUSE : 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:...

OPENSUSE-SU-2025:15326-1 chmlib-devel-0.40-26.1 on GA media

These are all security issues fixed in the chmlib-devel-0.40-26.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-48172

CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chmlib.c chmdecompressblock integer overflow. There is a resultant heap-based buffer overflow in chmfetchbytes...

SUSE CVE-2025-48172

CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chmlib.c chmdecompressblock integer overflow. There is a resultant heap-based buffer overflow in chmfetchbytes...

CVE-2025-48172

CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chmlib.c chmdecompressblock integer overflow. There is a resultant heap-based buffer overflow in chmfetchbytes...

UBUNTU-CVE-2025-48172

CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chmlib.c chmdecompressblock integer overflow. There is a resultant heap-based buffer overflow in chmfetchbytes...

CVE-2025-48172

CVE-2025-48172 involves CHMLib up to version 2bef8d0, which is used by SumatraPDF and other products. The underlying issue is an integer overflow in the function _chm_decompress_block within chm_lib.c, which can cause a heap-based buffer overflow in _chm_fetch_bytes. Documents consistently descri...

CVE-2025-48172

CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chmlib.c chmdecompressblock integer overflow. There is a resultant heap-based buffer overflow in chmfetchbytes...

CVE-2025-48172

CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chmlib.c chmdecompressblock integer overflow. There is a resultant heap-based buffer overflow in chmfetchbytes...

CVE-2025-48172

CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chmlib.c chmdecompressblock integer overflow. There is a resultant heap-based buffer overflow in chmfetchbytes...

CVE-2025-48172: Integer Overflow or Wraparound

CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chmlib.c chmdecompressblock integer overflow. There is a resultant heap-based buffer overflow in chmfetchbytes...

CHMLib 输入验证错误漏洞

CHMLib is a library of functions for working with CHM files from the individual developers of jedwing. An input validation error vulnerability exists in CHMLib 2bef8d0 and earlier versions, which stems from a chmdecompressblock integer overflow that could result in a heap buffer overflow...

PT-2025-27952

Name of the Vulnerable Software and Affected Versions: CHMLib versions through 2bef8d0 Description: The issue is related to an integer overflow in the chm decompress block function in chm lib.c, which leads to a heap-based buffer overflow in the chm fetch bytes function. This problem affects...

CVE-2025-48172

CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chmlib.c chmdecompressblock integer overflow. There is a resultant heap-based buffer overflow in chmfetchbytes...