CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-25920

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, a heap out-of-bounds read vulnerability exists in SumatraPDF's MOBI HuffDic decompressor. The bounds check in AddCdicData() only validates half the range that DecodeOne() actually accesses. Opening a crafted .mobi file can read nearly (1 << codeLength) bytes beyond the CDIC dictionary buffer, leading to a crash.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 4.1%

CVSS Severity

CVSS v3 Score 5.5

References

Products affected by CVE-2026-25920

Sumatrapdfreader » Sumatrapdf » Version: 0.1

cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.1
Sumatrapdfreader » Sumatrapdf » Version: 0.2

cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.2
Sumatrapdfreader » Sumatrapdf » Version: 0.3

cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.3
Sumatrapdfreader » Sumatrapdf » Version: 0.4

cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.4
Sumatrapdfreader » Sumatrapdf » Version: 0.5

cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.5
Sumatrapdfreader » Sumatrapdf » Version: 0.6

cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.6
Sumatrapdfreader » Sumatrapdf » Version: 0.7

cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.7
Sumatrapdfreader » Sumatrapdf » Version: 0.8

cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.8
Sumatrapdfreader » Sumatrapdf » Version: 0.8.1

cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.8.1
Sumatrapdfreader » Sumatrapdf » Version: 0.9

cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.9
Sumatrapdfreader » Sumatrapdf » Version: 0.9.1

cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.9.1
Sumatrapdfreader » Sumatrapdf » Version: 0.9.2

cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.9.2
Sumatrapdfreader » Sumatrapdf » Version: 0.9.3

cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.9.3
Sumatrapdfreader » Sumatrapdf » Version: 0.9.4

cpe:2.3:a:sumatrapdfreader:sumatrapdf:0.9.4
Sumatrapdfreader » Sumatrapdf » Version: 1.0

cpe:2.3:a:sumatrapdfreader:sumatrapdf:1.0
Sumatrapdfreader » Sumatrapdf » Version: 1.0.1

cpe:2.3:a:sumatrapdfreader:sumatrapdf:1.0.1
Sumatrapdfreader » Sumatrapdf » Version: 1.1

cpe:2.3:a:sumatrapdfreader:sumatrapdf:1.1
Sumatrapdfreader » Sumatrapdf » Version: 1.2

cpe:2.3:a:sumatrapdfreader:sumatrapdf:1.2
Sumatrapdfreader » Sumatrapdf » Version: 1.3

cpe:2.3:a:sumatrapdfreader:sumatrapdf:1.3
Sumatrapdfreader » Sumatrapdf » Version: 1.4

cpe:2.3:a:sumatrapdfreader:sumatrapdf:1.4
Sumatrapdfreader » Sumatrapdf » Version: 1.5

cpe:2.3:a:sumatrapdfreader:sumatrapdf:1.5
Sumatrapdfreader » Sumatrapdf » Version: 1.5.1

cpe:2.3:a:sumatrapdfreader:sumatrapdf:1.5.1
Sumatrapdfreader » Sumatrapdf » Version: 1.6

cpe:2.3:a:sumatrapdfreader:sumatrapdf:1.6
Sumatrapdfreader » Sumatrapdf » Version: 1.7

cpe:2.3:a:sumatrapdfreader:sumatrapdf:1.7
Sumatrapdfreader » Sumatrapdf » Version: 1.8

cpe:2.3:a:sumatrapdfreader:sumatrapdf:1.8
Sumatrapdfreader » Sumatrapdf » Version: 1.9

cpe:2.3:a:sumatrapdfreader:sumatrapdf:1.9
Sumatrapdfreader » Sumatrapdf » Version: 2.0

cpe:2.3:a:sumatrapdfreader:sumatrapdf:2.0
Sumatrapdfreader » Sumatrapdf » Version: 2.0.1

cpe:2.3:a:sumatrapdfreader:sumatrapdf:2.0.1
Sumatrapdfreader » Sumatrapdf » Version: 2.1

cpe:2.3:a:sumatrapdfreader:sumatrapdf:2.1
Sumatrapdfreader » Sumatrapdf » Version: 2.1.1

cpe:2.3:a:sumatrapdfreader:sumatrapdf:2.1.1
Sumatrapdfreader » Sumatrapdf » Version: 2.2

cpe:2.3:a:sumatrapdfreader:sumatrapdf:2.2
Sumatrapdfreader » Sumatrapdf » Version: 2.2.1

cpe:2.3:a:sumatrapdfreader:sumatrapdf:2.2.1
Sumatrapdfreader » Sumatrapdf » Version: 2.3

cpe:2.3:a:sumatrapdfreader:sumatrapdf:2.3
Sumatrapdfreader » Sumatrapdf » Version: 2.3.1

cpe:2.3:a:sumatrapdfreader:sumatrapdf:2.3.1
Sumatrapdfreader » Sumatrapdf » Version: 2.3.2

cpe:2.3:a:sumatrapdfreader:sumatrapdf:2.3.2
Sumatrapdfreader » Sumatrapdf » Version: 2.4

cpe:2.3:a:sumatrapdfreader:sumatrapdf:2.4
Sumatrapdfreader » Sumatrapdf » Version: 2.5

cpe:2.3:a:sumatrapdfreader:sumatrapdf:2.5
Sumatrapdfreader » Sumatrapdf » Version: 2.5.1

cpe:2.3:a:sumatrapdfreader:sumatrapdf:2.5.1
Sumatrapdfreader » Sumatrapdf » Version: 2.5.2

cpe:2.3:a:sumatrapdfreader:sumatrapdf:2.5.2
Sumatrapdfreader » Sumatrapdf » Version: 3.0

cpe:2.3:a:sumatrapdfreader:sumatrapdf:3.0
Sumatrapdfreader » Sumatrapdf » Version: 3.1

cpe:2.3:a:sumatrapdfreader:sumatrapdf:3.1
Sumatrapdfreader » Sumatrapdf » Version: 3.1.1

cpe:2.3:a:sumatrapdfreader:sumatrapdf:3.1.1
Sumatrapdfreader » Sumatrapdf » Version: 3.1.2

cpe:2.3:a:sumatrapdfreader:sumatrapdf:3.1.2
Sumatrapdfreader » Sumatrapdf » Version: 3.2

cpe:2.3:a:sumatrapdfreader:sumatrapdf:3.2
Sumatrapdfreader » Sumatrapdf » Version: 3.3

cpe:2.3:a:sumatrapdfreader:sumatrapdf:3.3
Sumatrapdfreader » Sumatrapdf » Version: 3.3.1

cpe:2.3:a:sumatrapdfreader:sumatrapdf:3.3.1
Sumatrapdfreader » Sumatrapdf » Version: 3.3.2

cpe:2.3:a:sumatrapdfreader:sumatrapdf:3.3.2
Sumatrapdfreader » Sumatrapdf » Version: 3.3.3

cpe:2.3:a:sumatrapdfreader:sumatrapdf:3.3.3
Sumatrapdfreader » Sumatrapdf » Version: 3.4

cpe:2.3:a:sumatrapdfreader:sumatrapdf:3.4
Sumatrapdfreader » Sumatrapdf » Version: 3.4.1

cpe:2.3:a:sumatrapdfreader:sumatrapdf:3.4.1
Sumatrapdfreader » Sumatrapdf » Version: 3.4.2

cpe:2.3:a:sumatrapdfreader:sumatrapdf:3.4.2
Sumatrapdfreader » Sumatrapdf » Version: 3.4.3

cpe:2.3:a:sumatrapdfreader:sumatrapdf:3.4.3
Sumatrapdfreader » Sumatrapdf » Version: 3.4.4

cpe:2.3:a:sumatrapdfreader:sumatrapdf:3.4.4
Sumatrapdfreader » Sumatrapdf » Version: 3.4.5

cpe:2.3:a:sumatrapdfreader:sumatrapdf:3.4.5
Sumatrapdfreader » Sumatrapdf » Version: 3.4.6

cpe:2.3:a:sumatrapdfreader:sumatrapdf:3.4.6
Sumatrapdfreader » Sumatrapdf » Version: 3.5

cpe:2.3:a:sumatrapdfreader:sumatrapdf:3.5
Sumatrapdfreader » Sumatrapdf » Version: 3.5.1

cpe:2.3:a:sumatrapdfreader:sumatrapdf:3.5.1
Sumatrapdfreader » Sumatrapdf » Version: 3.5.2

cpe:2.3:a:sumatrapdfreader:sumatrapdf:3.5.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-25920

Products

Pricing

Contact Us