high7.3
CVE-2025-57248
A null pointer dereference vulnerability was discovered in SumatraPDF 3.5.2 during the processing of a crafted .djvu file.
Impact
A null pointer dereference vulnerability was discovered in SumatraPDF 3.5.2 during the processing of a crafted .djvu file. When the file is opened, the application crashes inside libmupdf.dll, specifically in the DataPool::has_data() function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sumatrapdfreader | Sumatrapdf | Version 3.5.2 |