sumatrapdfreader records

13 published records for vendor sumatrapdfreader.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 5
With a fix record: 7.7%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

13 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2009-4117Proof of concept	Multiple stack-based buffer overflows in pdf_shade4.c in MuPDF before commit 20091125231942, as used in SumatraPDF before 1.0.1, allow remotsumatrapdfreader · sumatrapdf · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	7.8%	Nov 30, 2009
39Monitor	CVE-2012-4895No exploit	Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a differensumatrapdfreader · sumatrapdf · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	5.2%	Oct 5, 2012
39Monitor	CVE-2012-4896No exploit	Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a differensumatrapdfreader · sumatrapdf · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	5.2%	Oct 5, 2012
33Monitor	CVE-2012-5340Proof of concept	SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file.sumatrapdfreader · sumatrapdf · CWE-190 Memory safety	High7.8	—	5.7%	Jan 23, 2020
32Monitor	CVE-2013-2830No exploit	Use-after-free vulnerability in SumatraPDF Reader 2.x before 2.2.1 allows remote attackers to execute arbitrary code via a crafted PDF file.sumatrapdfreader · sumatrapdf · CWE-416 RCE Memory safety	High7.8	—	3.6%	Feb 8, 2018
31Monitor	CVE-2026-23512No exploit	SumatraPDF has an Untrusted Search Path in sumatrapdf/src/AppTools.cppsumatrapdfreader · sumatrapdf · CWE-426 RCE	High7.8	—	0.2%	Jan 14, 2026
31Monitor	CVE-2026-25880No exploit	Untrusted Search Path in SumatraPDF Reader (explorer.exe on Windows)sumatrapdfreader · sumatrapdf · CWE-426 RCE Local privilege escalation	High7.8	—	0.2%	Feb 9, 2026
30Monitor	CVE-2026-25961Proof of concept	SumatraPDF Update MITM -> Arbitrary Code Executionsumatrapdfreader · sumatrapdf · CWE-295 pre-auth RCE Weak crypto	High7.5	—	0.4%	Feb 9, 2026
29Monitor	CVE-2025-57248No exploit	A null pointer dereference vulnerability was discovered in SumatraPDF 3.5.2 during the processing of a crafted .djvu file.sumatrapdfreader · sumatrapdf · CWE-476 Pre-auth Memory safety	High7.3	—	0.2%	Sep 15, 2025
22Monitor	CVE-2009-1605No exploit	Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdf_function.c in MuPDF in the mupdf-20090223-win32 package, as usedsumatrapdfreader · sumatrapdf · CWE-119 pre-auth RCE Memory safety	Medium5.4	—	3.4%	May 11, 2009
22Monitor	CVE-2023-33802Proof of concept	A buffer overflow in SumatraPDF Reader v3.4.6 allows attackers to cause a Denial of Service (DoS) via a crafted text file.sumatrapdfreader · sumatrapdf · CWE-120 Memory safety Denial of service	Medium5.5	—	0.3%	Jul 26, 2023
22Monitor	CVE-2026-25920No exploit	SumatraPDF has a heap out-of-bounds read in MOBI HuffDic decompressorsumatrapdfreader · sumatrapdf · CWE-125 Memory safety Denial of service	Medium5.5	—	0.2%	Feb 9, 2026
22Monitor	CVE-2026-23951No exploit	SumatraPDF's Integer Underflow in PalmDbReader Leads to Crashsumatrapdfreader · sumatrapdf · CWE-125 Memory safety Denial of service	Medium5.5	—	0.2%	Jan 21, 2026

CVE-2009-4117
39Monitor
Multiple stack-based buffer overflows in pdf_shade4.c in MuPDF before commit 20091125231942, as used in SumatraPDF before 1.0.1, allow remot
CriticalCVSS 9.3Proof of conceptEPSS 8%
- pre-auth RCE
- Memory safety
sumatrapdfreader · sumatrapdfNov 30, 2009
CVE-2012-4895
39Monitor
Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a differen
CriticalCVSS 9.3No exploitEPSS 5%
- pre-auth RCE
- Memory safety
sumatrapdfreader · sumatrapdfOct 5, 2012
CVE-2012-4896
39Monitor
Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a differen
CriticalCVSS 9.3No exploitEPSS 5%
- pre-auth RCE
- Memory safety
sumatrapdfreader · sumatrapdfOct 5, 2012
CVE-2012-5340
33Monitor
SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file.
HighCVSS 7.8Proof of conceptEPSS 6%
- Memory safety
sumatrapdfreader · sumatrapdfJan 23, 2020
CVE-2013-2830
32Monitor
Use-after-free vulnerability in SumatraPDF Reader 2.x before 2.2.1 allows remote attackers to execute arbitrary code via a crafted PDF file.
HighCVSS 7.8No exploitEPSS 4%
- RCE
- Memory safety
sumatrapdfreader · sumatrapdfFeb 8, 2018
CVE-2026-23512
31Monitor
SumatraPDF has an Untrusted Search Path in sumatrapdf/src/AppTools.cpp
HighCVSS 7.8No exploitEPSS 0%
- RCE
sumatrapdfreader · sumatrapdfJan 14, 2026
CVE-2026-25880
31Monitor
Untrusted Search Path in SumatraPDF Reader (explorer.exe on Windows)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
sumatrapdfreader · sumatrapdfFeb 9, 2026
CVE-2026-25961
30Monitor
SumatraPDF Update MITM -> Arbitrary Code Execution
HighCVSS 7.5Proof of conceptEPSS 0%
- pre-auth RCE
- Weak crypto
sumatrapdfreader · sumatrapdfFeb 9, 2026
CVE-2025-57248
29Monitor
A null pointer dereference vulnerability was discovered in SumatraPDF 3.5.2 during the processing of a crafted .djvu file.
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
- Memory safety
sumatrapdfreader · sumatrapdfSep 15, 2025
CVE-2009-1605
22Monitor
Heap-based buffer overflow in the loadexponentialfunc function in mupdf/pdf_function.c in MuPDF in the mupdf-20090223-win32 package, as used
MediumCVSS 5.4No exploitEPSS 3%
- pre-auth RCE
- Memory safety
sumatrapdfreader · sumatrapdfMay 11, 2009
CVE-2023-33802
22Monitor
A buffer overflow in SumatraPDF Reader v3.4.6 allows attackers to cause a Denial of Service (DoS) via a crafted text file.
MediumCVSS 5.5Proof of conceptEPSS 0%
- Memory safety
- Denial of service
sumatrapdfreader · sumatrapdfJul 26, 2023
CVE-2026-25920
22Monitor
SumatraPDF has a heap out-of-bounds read in MOBI HuffDic decompressor
MediumCVSS 5.5No exploitEPSS 0%
- Memory safety
- Denial of service
sumatrapdfreader · sumatrapdfFeb 9, 2026
CVE-2026-23951
22Monitor
SumatraPDF's Integer Underflow in PalmDbReader Leads to Crash
MediumCVSS 5.5No exploitEPSS 0%
- Memory safety
- Denial of service
sumatrapdfreader · sumatrapdfJan 21, 2026