CVE-2026-107731

The multi-format reader SumatraPDF version 3.7.0.22298 for Windows contains four independently reachable range-validation flaws in src/LitDoc.cpp . These flaws allow file-controlled offsets and sizes to overflow, narrow to negative values, or wrap before incomplete bounds checks. Specifically, th...