PatchSiren

SumatraPDF CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH SumatraPDF CVE published 2026-09-24

CVE-2026-88361

CVE-2026-88361 is an integer overflow vulnerability in SumatraPDF 3.6.1 when parsing PDF PageLabels /Nums entries. Defenders should assess exposure, prioritize remediation, and verify SumatraPDF versions. This vulnerability exists in the EngineMupdf::BuildPageLabelRec() function and may impact organizations using affected versions of SumatraPDF. It is recommended to review the official CVE record and vend [truncated]