Priority HIGH 72
SumatraPDF is a multi-format reader for Windows.
sumatrapdfreader
Records27All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9
Exploited now
sumatrapdfreader records in CISA KEVNo sumatrapdfreader vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
13 records in Sumatrapdf · all components
TI-2025-35489 CVE-2025-57248 · GHSA-5gwg-fch7-wh55
A null pointer dereference vulnerability was discovered in SumatraPDF 3.5.2 during the…
Priority HIGH 71
A null pointer dereference vulnerability was discovered in SumatraPDF 3.5.2 during the processing of a crafted .djvu file.
TI-2012-04514 CVE-2012-5340 · GHSA-g8x3-qg8h-3qqr
SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the…
Priority HIGH 69
SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file.
Priority MEDIUM 58
SumatraPDF is a multi-format reader for Windows.
TI-2023-16705 CVE-2023-33802 · GHSA-mhq9-63xw-5x49
A buffer overflow in SumatraPDF Reader v3.4.6 allows attackers to cause a Denial of…
Priority MEDIUM 58
A buffer overflow in SumatraPDF Reader v3.4.6 allows attackers to cause a Denial of Service (DoS) via a crafted text file.
TI-2009-01521 CVE-2009-1605 · GHSA-g6xf-xq8f-56f4
Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdf_function.c in…
Priority MEDIUM 58
Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdf_function.c in MuPDF in the mupdf-20090223-win32 package, as used in SumatraPDF 0.9.3 and earlier, allows remote attackers to execute arbitrary c…
TI-2009-03906 CVE-2009-4117 · GHSA-5m5r-69xr-2fx8
Multiple stack-based buffer overflows in pdf_shade4.c in MuPDF before commit…
Priority MEDIUM 51
Multiple stack-based buffer overflows in pdf_shade4.c in MuPDF before commit 20091125231942, as used in SumatraPDF before 1.0.1, allow remote attackers to cause a denial of service and possibly execute arbitrary code via…
TI-2012-04138 CVE-2012-4896 · GHSA-q9xm-6wgc-cfhr
Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute…
Priority MEDIUM 48
Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2012-4895.
TI-2012-04137 CVE-2012-4895 · GHSA-678j-gm52-3vq4
Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute…
Priority MEDIUM 48
Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2012-4896.
TI-2013-02473 CVE-2013-2830 · GHSA-pxq3-h2cm-cxrj
Use-after-free vulnerability in SumatraPDF Reader 2.x before 2.2.1 allows remote…
Priority MEDIUM 40
Use-after-free vulnerability in SumatraPDF Reader 2.x before 2.2.1 allows remote attackers to execute arbitrary code via a crafted PDF file.
Priority LOW 35
SumatraPDF is a multi-format reader for Windows.
Priority LOW 35
SumatraPDF is a multi-format reader for Windows.
Priority LOW 24
SumatraPDF is a multi-format reader for Windows.