← Back

CVE-2025-48172

nvd nist
Published: Jul 4, 2025Modified: Jun 17, 2026Deferred

JSON object

Loading...
5.6
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
Exploitability: 1.4 / Impact: 3.7
Source: MITRE (Secondary)

Description

CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chm_lib.c _chm_decompress_block integer overflow. There is a resultant heap-based buffer overflow in _chm_fetch_bytes.

Related CWEs

CWE-190
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (5)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.