CVE-2026-23951

Katalog CVE

CVSS 5.5 · Medium EPSS 0,22%

Kerentanan Out-of-bounds Read pada sumatrapdfreader sumatrapdf. Skor CVSS 3.1 5.5 (Medium) menurut github.com.

Deskripsi (NVD)

SumatraPDF is a multi-format reader for Windows. All versions contain an off-by-one error in the validation code that only triggers with exactly 2 records, causing an integer underflow in the size calculation. This bug exists in PalmDbReader::GetRecord when opening a crafted Mobi file, resulting in an out-of-bounds heap read that crashes the app. There are no published fixes at the time of publication.

Rincian

Terbit di NVD

22 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber github.com
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read
CWE-191: Integer Underflow (Wrap or Wraparound)
CWE-193: Off-by-one Error

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 12,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/sumatrapdfreader/sumatrapdf/security/advisories/GHSA-hj4w-c5x8-p2hv exploit · advisory vendor
• https://github.com/sumatrapdfreader/sumatrapdf/blob/master/src/PalmDbReader.cpp product