Advisories · Technology
sumatrapdf.
Every CVE that names sumatrapdf among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.2 High
SumatraPDF: TLS hostname validation disabled in `HttpGet()`
- sumatrapdf
- Weak cryptography or TLS
- CVSS 7.1 High
SumatraPDF — Windows command-line argument injection in AI selection-translate
- sumatrapdf
- Command injection
- CVSS 6.8 Medium
SumatraPDF: Untrusted binary record offset used without lower-bound validation
- sumatrapdf
- Memory corruption
- CVSS 5.7 Medium
SumatraPDF CHM `its://` signed index causes an out-of-bounds object lookup
- sumatrapdf
- CWE-129
- CVSS 6.8 Medium
SumatraPDF: stack buffer overflow while processing EXIF Orientation metadata
- sumatrapdf
- Memory corruption
- CVSS 5.4 Medium
SumatraPDF: `sumatrapdfrestrict.ini` never revokes any permission (fail-open policy initialization)
- sumatrapdf
- CWE-636
- CVSS 7.1 High
SumatraPDF: SyncTeX Argument Injection in Inverse Search Enables Arbitrary Command Execution via External Editors
- sumatrapdf
- Command injection
- CWE-20
- CVSS 6.8 Medium
SumatraPDF: Null-pointer dereference in `CmdExec` when no document tab is open
- sumatrapdf
- Memory corruption
- CVSS 8.4 High
SumatraPDF: Markup/command-link injection into UI notification text
- sumatrapdf
- Code injection
- CVSS 5.5 Medium
SumatraPDF: LIT parser range-validation flaws cause invalid-pointer reads and denial of service
- sumatrapdf
- Memory corruption
- CVSS 5.5 Medium
SumatraPDF: Signed integer overflow in the LIT header parsing causes invalid-pointer read
- sumatrapdf
- Memory corruption
- CVSS 5.5 Medium
SumatraPDF: Unsigned-to-signed hdrLen validation bypass in SumatraPDF MOBI parsing causes out-of-bounds read
- sumatrapdf
- Memory corruption
- CVSS 6.8 Medium
SumatraPDF: Heap out-of-bounds read in MOBI header parser.
- sumatrapdf
- Memory corruption
- CVSS 6.6 Medium
SumatraPDF: Heap out-of-bounds write in vendored CHMLib LZX Huffman table construction reachable from crafted CHM files
- sumatrapdf
- Memory corruption
- CVSS 7.5 High
SumatraPDF Update MITM -> Arbitrary Code Execution
- sumatrapdf
- Weak cryptography or TLS
- CWE-494
- CVSS 5.5 Medium
SumatraPDF has a heap out-of-bounds read in MOBI HuffDic decompressor
- sumatrapdf
- Memory corruption
- CVSS 7.8 High
Untrusted Search Path in SumatraPDF Reader (explorer.exe on Windows)
- sumatrapdf
- CWE-426
- CVSS 5.5 Medium
SumatraPDF's Integer Underflow in PalmDbReader Leads to Crash
- sumatrapdf
- Memory corruption
- CVSS 8.6 High
SumatraPDF has an Untrusted Search Path in sumatrapdf/src/AppTools.cpp
- sumatrapdf
- CWE-426