Description
A security flaw has been discovered in Investintech SlimPDFReader up to 2.0.14. Affected by this issue is the function SlimPDFReader!Investintech::PCV::TeighaDo+0x25cde0 of the file SlimPDFReader.exe of the component PDF File Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. This vulnerability only affects products that are no longer supported by the maintainer.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Investintech | SlimPDFReader | 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14 | — |
References
- VDB-374530 | Investintech SlimPDFReader PDF File SlimPDFReader.exe TeighaDo+0x25cde0 out-of-bounds vdb-entry technical-description
- VDB-374530 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-13522 | CVE Analysis and Report third-party-advisory
- Submit #839637 | Investintech SlimPDFReader 2.0.14 Out-of-bounds read third-party-advisory