Sumatrapdfreader Sumatrapdf vulnerabilities

• sumatrapdfreader sumatrapdf SumatraPDF: TLS hostname validation disabled in `HttpGet()` CVE-2026-115758 8.2 HighNovember 4, 2026
• sumatrapdfreader sumatrapdf SumatraPDF — Windows command-line argument injection in AI selection-translate CVE-2026-107802 7.1 HighOctober 8, 2026
• sumatrapdfreader sumatrapdf SumatraPDF: Untrusted binary record offset used without lower-bound validation CVE-2026-107738 6.8 MediumOctober 8, 2026
• sumatrapdfreader sumatrapdf SumatraPDF CHM `its://` signed index causes an out-of-bounds object lookup CVE-2026-107737 5.7 MediumOctober 8, 2026
• sumatrapdfreader sumatrapdf SumatraPDF: stack buffer overflow while processing EXIF Orientation metadata CVE-2026-107736 6.8 MediumOctober 8, 2026
• sumatrapdfreader sumatrapdf SumatraPDF: `sumatrapdfrestrict.ini` never revokes any permission (fail-open policy initialization) CVE-2026-107735 5.4 MediumOctober 8, 2026
• sumatrapdfreader sumatrapdf SumatraPDF: SyncTeX Argument Injection in Inverse Search Enables Arbitrary Command Execution via External Editors CVE-2026-107734 7.1 HighOctober 8, 2026
• sumatrapdfreader sumatrapdf SumatraPDF: Null-pointer dereference in `CmdExec` when no document tab is open CVE-2026-107733 6.8 MediumOctober 8, 2026
• sumatrapdfreader sumatrapdf SumatraPDF: Markup/command-link injection into UI notification text CVE-2026-107732 8.4 HighOctober 8, 2026
• sumatrapdfreader sumatrapdf SumatraPDF: LIT parser range-validation flaws cause invalid-pointer reads and denial of service CVE-2026-107731 5.5 MediumOctober 8, 2026
• sumatrapdfreader sumatrapdf SumatraPDF: Signed integer overflow in the LIT header parsing causes invalid-pointer read CVE-2026-107730 5.5 MediumOctober 8, 2026
• sumatrapdfreader sumatrapdf SumatraPDF: Unsigned-to-signed hdrLen validation bypass in SumatraPDF MOBI parsing causes out-of-bounds read CVE-2026-107729 5.5 MediumOctober 8, 2026
• sumatrapdfreader sumatrapdf SumatraPDF: Heap out-of-bounds read in MOBI header parser. CVE-2026-26054 6.8 MediumSeptember 24, 2026
• sumatrapdfreader sumatrapdf SumatraPDF: Heap out-of-bounds write in vendored CHMLib LZX Huffman table construction reachable from crafted CHM files CVE-2026-55586 6.6 MediumAugust 20, 2026
• sumatrapdfreader sumatrapdf SumatraPDF Update MITM -> Arbitrary Code Execution CVE-2026-25961 Public exploit 7.5 HighFebruary 9, 2026
• sumatrapdfreader sumatrapdf SumatraPDF has a heap out-of-bounds read in MOBI HuffDic decompressor CVE-2026-25920 5.5 MediumFebruary 9, 2026
• sumatrapdfreader sumatrapdf Untrusted Search Path in SumatraPDF Reader (explorer.exe on Windows) CVE-2026-25880 7.8 HighFebruary 9, 2026
• sumatrapdfreader sumatrapdf SumatraPDF's Integer Underflow in PalmDbReader Leads to Crash CVE-2026-23951 5.5 MediumJanuary 22, 2026
• sumatrapdfreader sumatrapdf SumatraPDF has an Untrusted Search Path in sumatrapdf/src/AppTools.cpp CVE-2026-23512 8.6 HighJanuary 14, 2026
• sumatrapdfreader sumatrapdf A null pointer dereference vulnerability was discovered in SumatraPDF 3.5.2 during the processing... CVE-2025-57248 7.3 HighSeptember 15, 2025
• sumatrapdfreader sumatrapdf A buffer overflow in SumatraPDF Reader v3.4.6 allows attackers to cause a Denial of Service (DoS)... CVE-2023-33802 Public exploit 5.5 MediumJuly 26, 2023
• artifex mupdf, sumatrapdfreader sumatrapdf +1 more SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number... CVE-2012-5340 Public exploitFix available 7.8 HighJanuary 23, 2020
• sumatrapdfreader sumatrapdf Use-after-free vulnerability in SumatraPDF Reader 2.x before 2.2.1 allows remote attackers to... CVE-2013-2830 7.8 HighFebruary 8, 2018
• sumatrapdfreader sumatrapdf Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary... CVE-2012-4896 9.3 HighOctober 5, 2012
• sumatrapdfreader sumatrapdf Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary... CVE-2012-4895 9.3 HighOctober 5, 2012
• sumatrapdfreader sumatrapdf Multiple stack-based buffer overflows in pdf_shade4.c in MuPDF before commit 20091125231942, as... CVE-2009-4117 Public exploit 9.3 HighDecember 1, 2009
• sumatrapdfreader sumatrapdf Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdf_function.c in MuPDF... CVE-2009-1605 9.3 HighMay 11, 2009