CVE-2026-107729

Published 8 October 2026 · tracked since 9 October 2026

Description

SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, src/MobiDoc.cpp narrows the untrusted unsigned mobiHdr.hdrLen field to a signed integer for validation; values above INT_MAX become negative and bypass the upper-bound check. When the EXTH flag is set, the original unsigned value is re

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-107910 HIGH 8.1
• CVE-2026-107911 HIGH 7.5
• CVE-2026-7826 CRITICAL 9.1
• CVE-2026-7827 HIGH 8.1
• CVE-2026-5759 CRITICAL 9.8
• CVE-2026-107888 MEDIUM 5.1
• CVE-2026-88131 CRITICAL 9.8
• CVE-2026-56857 CRITICAL 9.8
• CVE-2026-107730 MEDIUM 5.5
• CVE-2026-107731 MEDIUM 5.5

→ Open the live CVE board · all tools