Sumatrapdfvulnerabilities And Exploits

Sumatrapdfreader Sumatrapdf Don't miss out! Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Sumatrapdfreader Sumatrapdf. By the Year In 2026 there have been 5 vulnerabilities in Sumatrapdfreader Sumatrapdf with an average score of 7.0 out of ten. Sumatrapdf did not have any published security vulnerabilities last year. That is, 5 more vulnerabilities have already been reported in 2026 as compared to last year.

It may take a day or so for new Sumatrapdf vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name. Recent Sumatrapdfreader Sumatrapdf Security Vulnerabilities SumatraPDF 3.5.0-3.5.2 TLS Hostname Verification Disabled in Update Mechanism CVE-2026-25961 7.5 - High - February 09, 2026 SumatraPDF is a multi-format reader for Windows. In 3.5.0 through 3.5.2, SumatraPDF's update mechanism disables TLS hostname verification (INTERNET_FLAG_IGNORE_CERT_CN_INVALID) and executes installers without signature checks.

A network attacker with any valid TLS certificate (e.g., Let's Encrypt) can intercept the update check request, inject a malicious installer URL, and achieve arbitrary code execution. Improper Certificate Validation SumatraPDF 3.5.2- Heap OOB Read in MOBI HuffDic Decompressor CVE-2026-25920 5.5 - Medium - February 09, 2026 SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, a heap out-of-bounds read vulnerability exists in SumatraPDF's MOBI HuffDic decompressor. The bounds check in AddCdicData() only validates half the range that DecodeOne() actually accesses.

Opening a crafted.mobi file can read nearly (1 << codeLength) bytes beyond the CDIC dictionary buffer, leading to a crash. Out-of-bounds Read SumatraPDF <3.5.2: RCE via Show in Folder CVE-2026-25880 7.8 - High - February 09, 2026 SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, the PDF reader allows execution of a malicious binary (explorer.exe) located in the same directory as the opened PDF when the user clicks File Show in folder.

This behavior leads to arbitrary code execution on the victims system with the privileges of the current user, without any warning or user interaction beyond the menu click. Untrusted Path SumatraPDF PalmDBReader OOB read via 2-record Mobi CVE-2026-23951 5.5 - Medium - January 22, 2026 SumatraPDF is a multi-format reader for Windows. All versions contain an off-by-one error in the validation code that only triggers with exactly 2 records, causing an integer underflow in the size calculation.

This bug exists in PalmDbReader::GetRecord when opening a crafted Mobi file, resulting in an out-of-bounds heap read that crashes the app. There are no published fixes at the time of publication. Out-of-bounds Read Untrusted Search Path in SumatraPDF <3.5.2 (notepad.exe exec) CVE-2026-23512 8.6 - High - January 14, 2026 SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, there is a Untrusted Search Path vulnerability when Advanced Options setting is trigger. The application executes notepad.exe without specifying an absolute path when using the Advanced Options setting.

On Windows, this allows execution of a malicious notepad.exe placed in the application's installation directory, leading to arbitrary code execution. Untrusted Path SumatraPDF buffer overflow DoS v3.4.6 CVE-2023-33802 5.5 - Medium - July 26, 2023 A buffer overflow in SumatraPDF Reader v3.4.6 allows attackers to cause a Denial of Service (DoS) via a crafted text file. Classic Buffer Overflow SumatraPDF 2.1.1/MuPDF 1.0 CVE-2012-5340 - January 23, 2020 SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file.

Multiple stack-based buffer overflows in pdf_shade4.c in MuPDF before commit 20091125231942, as used in SumatraPDF before 1.0.1, allow remote attackers to cause a denial of service and possibly execute arbitrary code via a /Decode array for certain types of shading CVE-2009-4117 - December 01, 2009 Multiple stack-based buffer overflows in pdf_shade4.c in MuPDF before commit 20091125231942, as used in SumatraPDF before 1.0.1, allow remote attackers to cause a denial of service and possibly execute arbitrary code via a /Decode array for certain types of shading that are not properly handled by the (1) pdf_loadtype4shade, (2) pdf_loadtype5shade, (3) pdf_loadtype6shade, and (4) pdf_loadtype7shade functions.

NOTE: some of these details are obtained from third party information. Buffer Overflow Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdf_function.c in MuPDF in the mupdf-20090223-win32 package, as used in SumatraPDF 0.9.3 and earlier CVE-2009-1605 5.4 - Medium - May 11, 2009 Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdf_function.c in MuPDF in the mupdf-20090223-win32 package, as used in SumatraPDF 0.9.3 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF file. NOTE: some of these details are obtained from third party information.

Stay on top of Security Vulnerabilities Want an email whenever new vulnerabilities are published for Sumatrapdfreader Sumatrapdf or by Sumatrapdfreader? Click the Watch button to subscribe.

People Also Asked

• sumatrapdfreader%20CVE%20Vulnerabilities%20%26%20Metrics
• Is%20Sumatra%20affected%20by%20ghostscript%20RCE%20vuln.%20CVE-2023-36664%3F
• Sumatrapdfreader%20Sumatrapdf%20Security%20Vulnerabilities%20in%202026
• CVE%20Threat%20Database%20%7C%20Real-Time%20Security%20Insights
• Sumatrapdfreader%20Sumatrapdf%20security%20vulnerabilities%2C%20CVEs%2C%20versions...
• Sumatrapdf%20CVEs%20and%20Security%20Vulnerabilities%20-%20OpenCVE
• Sumatra%20PDF%203.5.2%20DLL%20Hijacking%20-%20Vulmon
• Latest%20Sumatrapdfreader%20Vulnerabilities%20-%20Feedly