CVE-2026-107731: Sumatrapdfreader Sumatrapdf

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, four independently reachable range-validation variants in src/LitDoc.cpp allow file-controlled offsets and sizes to overflow, narrow to negative values, or wrap before incomplete bounds checks. The affected calculations include contentOffset, the directory expression dirOff64 + dirLen64, and the decoded-section offset + size, along with secondary-header range handling. Opening a crafted LIT file that reaches one of these variants can cause invalid pointer reads and deterministic application termination. No broader impact is claimed beyond the advisory-supported conditions. No fixed version is available as of this review.

Affected products

• Sumatrapdfreader Sumatrapdf: up to and including 3.7.0.22298

Published 2026-10-08. Last modified 2026-10-09.