CHMLib

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

CHMLib records in CISA KEV

No CHMLib vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Chmlib 1 record MEDIUM

Records

2 records

TI-2025-30542 CVE-2025-48172 · GHSA-rpc6-w47v-qqr6

Integer overflow in CHMLib

MEDIUM 58

CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chm_lib.c _chm_decompress_block integer overflow.

CVSS 3.1MEDIUM 5.6 Local No auth No interaction EPSS 0.00183 Published 2025-07-04 No fix listed CWE-190

TI-2007-00604 CVE-2007-0619 · GHSA-3pjf-v2wg-p54r

chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a…

MEDIUM 48

chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted page block length in a CHM file, which triggers memory corruption.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04648 Published 2007-01-31 No fix listed

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0