What the vulnerability does
01Description
CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chm_lib.c _chm_decompress_block integer overflow. There is a resultant heap-based buffer overflow in _chm_fetch_bytes.
CVSS base score
5.6/10
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
Key dates
02Disclosure timeline
July 4, 2025
CVE published
July 8, 2025
Record updated
External resources
03References
Related vulnerabilities
04Related CVE
CVE-2023-33038 Integer Overflow or Wraparound in Radio Interface Layer
CVE-2025-52581
CVE-2023-34453 snappy-java's Integer Overflow vulnerability in shuffle leads to DoS
CVE-2021-32762 Integer overflow that can lead to heap overflow in redis-cli, redis-sentinel on some platforms
CVE-2026-34680 CAI Content Credentials | Integer Overflow or Wraparound (CWE-190)
