CVE-2026-25920 — Out-of-bounds Read in Sumatrapdf

CWE-125 — Out-of-bounds Read7 documents3 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 93.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Sumatrapdfreader Sumatrapdf
Timeline
PublishedFeb 9

Description

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, a heap out-of-bounds read vulnerability exists in SumatraPDF's MOBI HuffDic decompressor. The bounds check in AddCdicData() only validates half the range that DecodeOne() actually accesses. Opening a crafted .mobi file can read nearly (1 << codeLength) bytes beyond the CDIC dictionary buffer, leading to a crash.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

1
CVEList
SumatraPDF has a heap out-of-bounds read in MOBI HuffDic decompressor↗2026-02-09
▶

🕵️Threat Intelligence

5
Wiz
CVE-2026-23951 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶
Wiz
CVE-2026-23512 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶
Wiz
CVE-2026-25961 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶
Wiz
CVE-2026-25920 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶
Wiz
CVE-2026-25880 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶
CVE-2026-25920 — Out-of-bounds Read in Sumatrapdf | cvebase