VYPR
← All advisories
Medium severity5.5OSV Advisory· Published Jan 22, 2026· Updated Jun 17, 2026

CVE-2026-23951

CVE-2026-23951

Description

SumatraPDF is a multi-format reader for Windows. All versions contain an off-by-one error in the validation code that only triggers with exactly 2 records, causing an integer underflow in the size calculation. This bug exists in PalmDbReader::GetRecord when opening a crafted Mobi file, resulting in an out-of-bounds heap read that crashes the app. There are no published fixes at the time of publication.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Sumatrapdfreader/SumatrapdfOSV3 versions
    1.4split, 1.5split, 1.6split, …+ 2 more
    • (no CPE)range: 1.4split, 1.5split, 1.6split, …
    • cpe:2.3:a:sumatrapdfreader:sumatrapdf:-:*:*:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.