CVE-2026-25961

>= 3.5 and <= 3.5.2

SumatraPDF is a multi-format reader for Windows. In 3.5.0 through 3.5.2, SumatraPDF's update mechanism disables TLS hostname verif

7.5HIGH

CVE-2026-25920

<= 3.5.2

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, a heap out-of-bounds read vulnerability exists in SumatraPD

5.5MEDIUM

CVE-2026-25880

<= 3.5.2

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, the PDF reader allows execution of a malicious binary (expl

7.8HIGH

CVE-2026-23951

all versions

SumatraPDF is a multi-format reader for Windows. All versions contain an off-by-one error in the validation code that only trigger

5.5MEDIUM

CVE-2026-23512

<= 3.5.2

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, there is a Untrusted Search Path vulnerability when Advance

8.6HIGH

CVE-2025-57248

all versions

A null pointer dereference vulnerability was discovered in SumatraPDF 3.5.2 during the processing of a crafted .djvu file. When th

7.3HIGH

CVE-2023-33802

all versions

A buffer overflow in SumatraPDF Reader v3.4.6 allows attackers to cause a Denial of Service (DoS) via a crafted text file.

5.5MEDIUM

CVE-2012-5340

all versions

SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF fil

7.8HIGH

CVE-2013-2830

>= 2.0 and < 2.2.1

Use-after-free vulnerability in SumatraPDF Reader 2.x before 2.2.1 allows remote attackers to execute arbitrary code via a crafted

7.8HIGH

CVE-2012-4896

<= 2.0.1

Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document,

CVE-2012-4895

<= 2.0.1

Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document,

CVE-2009-4117

<= 1.0

Multiple stack-based buffer overflows in pdf_shade4.c in MuPDF before commit 20091125231942, as used in SumatraPDF before 1.0.1, a

CVE-2009-1605

<= 0.9.3

Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdf_function.c in MuPDF in the mupdf-20090223-win32 packag

5.4MEDIUM