Skip to content
OpenAdvisories
High · 7.3 CVE-2025-57248 EUVD-2025-29204GHSA-5gwg-fch7-wh55

A null pointer dereference vulnerability was discovered in SumatraPDF 3.5.2 during the processing of a crafted .djvu file. When the file is…

Published Sep 15, 2025 · Updated Sep 15, 2025 · Assigned by mitre

Description

A null pointer dereference vulnerability was discovered in SumatraPDF 3.5.2 during the processing of a crafted .djvu file. When the file is opened, the application crashes inside libmupdf.dll, specifically in the DataPool::has_data() function.

References