CVE-2023-33802

CVE-2023-33802 is a buffer overflow in SumatraPDF Reader v3.4.6 triggered by processing crafted text files, causing a DoS. Root cause cited in supplied sources involves insufficient size checking when handling text input. Public references (PT-2023-3988) describe the impact on SumatraPDF 3.4.6 an...

CVE-2026-25920

CVE-2026-25920 affects SumatraPDF

CVE-2026-23951

SumatraPDF is affected by an off-by-one error in PalmDbReader::GetRecord when opening crafted Mobi files, triggering only with exactly 2 records and causing an integer underflow in the size calculation. This leads to an out-of-bounds heap read that crashes the application. The CVE notes indicate ...