88 matches found
CVE-2026-55586 SumatraPDF: Heap out-of-bounds write in vendored CHMLib LZX Huffman table construction reachable from crafted CHM files
SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, a crafted CHM file can supply malformed LZX Huffman code lengths to makedecodetable in ext/CHMLib/lzx.c. In the long-code branch, the function writes new internal nodes through nextsymbol before validating that the canonical...
EUVD-2005-2930
Malware in sbrugna...
EUVD-2025-20018
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2025-48172
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chmlib.c chmdecompressblock integer overflow. There is a resultant heap-based buffer...
chmlib-devel-0.40-26.1 on GA media (moderate)
chmlib-devel-0.40-26.1 on GA media Announcement ID: openSUSE-SU-2025:15326-1 Rating: moderate Cross-References: CVE-2025-48172 CVSS scores: CVE-2025-48172 SUSE : 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2025-48172 SUSE : 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:...
OPENSUSE-SU-2025:15326-1 chmlib-devel-0.40-26.1 on GA media
These are all security issues fixed in the chmlib-devel-0.40-26.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-48172
CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chmlib.c chmdecompressblock integer overflow. There is a resultant heap-based buffer overflow in chmfetchbytes...
SUSE CVE-2025-48172
CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chmlib.c chmdecompressblock integer overflow. There is a resultant heap-based buffer overflow in chmfetchbytes...
CVE-2025-48172
CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chmlib.c chmdecompressblock integer overflow. There is a resultant heap-based buffer overflow in chmfetchbytes...
UBUNTU-CVE-2025-48172
CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chmlib.c chmdecompressblock integer overflow. There is a resultant heap-based buffer overflow in chmfetchbytes...
CVE-2025-48172
CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chmlib.c chmdecompressblock integer overflow. There is a resultant heap-based buffer overflow in chmfetchbytes...
CVE-2025-48172
CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chmlib.c chmdecompressblock integer overflow. There is a resultant heap-based buffer overflow in chmfetchbytes...
CVE-2025-48172
CVE-2025-48172 involves CHMLib up to version 2bef8d0, which is used by SumatraPDF and other products. The underlying issue is an integer overflow in the function _chm_decompress_block within chm_lib.c, which can cause a heap-based buffer overflow in _chm_fetch_bytes. Documents consistently descri...
CVE-2025-48172
CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chmlib.c chmdecompressblock integer overflow. There is a resultant heap-based buffer overflow in chmfetchbytes...
CVE-2025-48172
CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chmlib.c chmdecompressblock integer overflow. There is a resultant heap-based buffer overflow in chmfetchbytes...
CHMLib 输入验证错误漏洞
CHMLib is a library of functions for working with CHM files from the individual developers of jedwing. An input validation error vulnerability exists in CHMLib 2bef8d0 and earlier versions, which stems from a chmdecompressblock integer overflow that could result in a heap buffer overflow...
PT-2025-27952 · Unknown +2 · Sumatrapdf +2
Name of the Vulnerable Software and Affected Versions: CHMLib versions through 2bef8d0 Description: The issue is related to an integer overflow in the chm decompress block function in chm lib.c, which leads to a heap-based buffer overflow in the chm fetch bytes function. This problem affects...
SUSE CVE-2005-2930
Stack-based buffer overflow in the chmfindinPMGL function in chmlib.c for chmlib before 0.36, as used in products such as KchmViewer, allows user-assisted attackers to execute arbitrary code via a CHM file containing a long element, a different vulnerability than CVE-2005-3318...
SUSE CVE-2006-3178
Directory traversal vulnerability in extractchmLib example program in CHM Lib chmlib before 0.38 allows remote attackers to overwrite arbitrary files via a CHM archive containing files with a .. dot dot in their filename...