CVE-2026-25961-SumatraPDF-3.5.0---3.5.2-RCE

SumatraPDF Insecure Update PoC CVE-2026-25961 – Удаленное выполнение кода через вредоносный сервер обновлений Автор: Mohammed Idrees Banyamer Дата: февраль 2026 CVE: CVE-2026-25961 GHSA: GHSA-xpm2-rr5m-x96q CVSS v3.1: 7.5 High AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Затронутые версии: SumatraPDF 3.5....

CVE-2023-33802

CVE-2023-33802 SumatraPDF 3.4.6 -32-bit Denial Of Services DoS Description In this bug, a crash is addressed which is manifested when we open two large size text files first.txt & second.txt as input to SumatraPDF 32 bit. Run the following command, or you can manually open the both files in...

CVE-2026-26054

SumatraPDF is a multi-format reader for Windows. Prior to 3.6, the MobiDoc::ParseHeader function in src/MobiDoc.cpp validates a record using kMobiHeaderMinLen but DecodeMobiDocHeader constructs a decoder sized for kMobiHeaderLen without receiving the actual remaining buffer length. A malformed MO...

EUVD-2026-86296

SumatraPDF is a multi-format reader for Windows. Prior to 3.6, the MobiDoc::ParseHeader function in src/MobiDoc.cpp validates a record using kMobiHeaderMinLen but DecodeMobiDocHeader constructs a decoder sized for kMobiHeaderLen without receiving the actual remaining buffer length. A malformed MO...

CVE-2026-26054 SumatraPDF: Heap out-of-bounds read in MOBI header parser.

SumatraPDF is a multi-format reader for Windows. Prior to 3.6, the MobiDoc::ParseHeader function in src/MobiDoc.cpp validates a record using kMobiHeaderMinLen but DecodeMobiDocHeader constructs a decoder sized for kMobiHeaderLen without receiving the actual remaining buffer length. A malformed MO...

CVE-2026-26054

SumatraPDF, a multi-format reader for Windows, is vulnerable to a heap out-of-bounds read in the MobiDoc::ParseHeader function within src/MobiDoc.cpp. The issue occurs because DecodeMobiDocHeader constructs a decoder sized for kMobiHeaderLen without verifying the actual remaining buffer length, e...

CVE-2026-26054 SumatraPDF: Heap out-of-bounds read in MOBI header parser.

SumatraPDF is a multi-format reader for Windows. Prior to 3.6, the MobiDoc::ParseHeader function in src/MobiDoc.cpp validates a record using kMobiHeaderMinLen but DecodeMobiDocHeader constructs a decoder sized for kMobiHeaderLen without receiving the actual remaining buffer length. A malformed MO...

CVE-2026-26054 SumatraPDF: Heap out-of-bounds read in MOBI header parser.

SumatraPDF is a multi-format reader for Windows. Prior to 3.6, the MobiDoc::ParseHeader function in src/MobiDoc.cpp validates a record using kMobiHeaderMinLen but DecodeMobiDocHeader constructs a decoder sized for kMobiHeaderLen without receiving the actual remaining buffer length. A malformed MO...

CVE-2026-88361

SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec when parsing PDF PageLabels /Nums entries...

CVE-2026-88361

SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec when parsing PDF PageLabels /Nums entries...

CVE-2026-26054: Out-of-bounds Read

SumatraPDF is a multi-format reader for Windows. Prior to 3.6, the MobiDoc::ParseHeader function in src/MobiDoc.cpp validates a record using kMobiHeaderMinLen but DecodeMobiDocHeader constructs a decoder sized for kMobiHeaderLen without receiving the actual remaining buffer length. A malformed MO...

PT-2026-97866

Name of the Vulnerable Software and Affected Versions SumatraPDF version 3.6.1 Description An integer overflow occurs in the EngineMupdf::BuildPageLabelRec function when the software parses PDF PageLabels /Nums entries. An integer overflow is a condition where an arithmetic operation attempts to...

CVE-2026-88361: Integer Overflow or Wraparound

SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec when parsing PDF PageLabels /Nums entries...

CVE-2026-88361

SumatraPDF version 3.6.1 is vulnerable to an integer overflow within the EngineMupdf::BuildPageLabelRec() function. This vulnerability occurs when the software parses PDF PageLabels /Nums entries . The technical details do not specify a direct exploitation path or specific remote impact beyond th...

EUVD-2026-86287

SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec when parsing PDF PageLabels /Nums entries...

PT-2026-98141

Name of the Vulnerable Software and Affected Versions SumatraPDF versions prior to 3.6 Description The MobiDoc::ParseHeader function in src/MobiDoc.cpp validates records using kMobiHeaderMinLen, while DecodeMobiDocHeader creates a decoder sized for kMobiHeaderLen without verifying the actual...

CVE-2026-88361

SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec when parsing PDF PageLabels /Nums entries...

CVE-2026-88361

SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec when parsing PDF PageLabels /Nums entries...

The vulnerability in the `makeDecodeTable` function of the `ext/CHMLib/lzx.c` file, a program for viewing documents in formats such as PDF, EPUB, MOBI, FB2, CHM, XPS, and DjVu using SumatraPDF, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the makeDecodeTable function in the ext/CHMLib/lzx.c file of the SumatraPDF program, which is used to display documents in formats such as PDF, EPUB, MOBI, FB2, CHM, XPS, and DjVu, relates to the execution of operations outside of the buffer. Exploiting this vulnerability cou...

CVE-2026-55586

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, a crafted CHM file can supply malformed LZX Huffman code lengths to makedecodetable in ext/CHMLib/lzx.c. In the long-code branch, the function writes new internal nodes through nextsymbol before validating that the canonical...