CVE-2025-57248 – SumatraPDF Null Pointer Dereference Vulnerability

CVE ID : CVE-2025-57248

Published : Sept. 15, 2025, 4:15 p.m. | 38 minutes ago

Description : A null pointer dereference vulnerability was discovered in SumatraPDF 3.5.2 during the processing of a crafted .djvu file. When the file is opened, the application crashes inside libmupdf.dll, specifically in the DataPool::has_data() function.

Severity: 7.3 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…