{"id":"CVE-2025-48172","details":"CHMLib through 2bef8d0, as used in SumatraPDF and other products, has a chm_lib.c _chm_decompress_block integer overflow. There is a resultant heap-based buffer overflow in _chm_fetch_bytes.","modified":"2026-08-12T15:13:52.229661Z","published":"2025-07-04T00:00:00Z","related":["openSUSE-SU-2025:15326-1"],"database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/48xxx/CVE-2025-48172.json","unresolved_ranges":[{"extracted_events":[{"last_affected":"2bef8d063ec7d88a8de6fd9f0513ea42ac0fa21f"}],"source":"AFFECTED_FIELD"},{"extracted_events":[{"last_affected":"2bef8d063ec7d88a8de6fd9f0513ea42ac0fa21f"}],"source":"CPE_FIELD"},{"extracted_events":[{"fixed":"2bef8d0"}],"source":"DESCRIPTION"}],"cna_assigner":"mitre","cwe_ids":["CWE-190"]},"references":[{"type":"WEB","url":"https://drive.google.com/file/d/1XpulFyCGlq7Szzg5RsH-eRwZ6OyuSozl/view?usp=sharing"},{"type":"WEB","url":"https://drive.google.com/file/d/1wq51px42eoJz2VQ1Qu9ObPVQVom9T9H_/view?usp=sharing"},{"type":"WEB","url":"https://github.com/jedwing/CHMLib/blob/2bef8d063ec7d88a8de6fd9f0513ea42ac0fa21f/src/chm_lib.c#L1386"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/48xxx/CVE-2025-48172.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48172"},{"type":"FIX","url":"https://github.com/sumatrapdfreader/sumatrapdf/commit/08179946a745cf1605e4b9670942ec1a6e1f4c5d"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/sumatrapdfreader/sumatrapdf","events":[{"introduced":"0"},{"fixed":"08179946a745cf1605e4b9670942ec1a6e1f4c5d"}],"database_specific":{"source":"REFERENCES"}}],"versions":["3.2","3.1.2rel","3.0split","2.5split","2.4split","2.3split","2.2split","2.1split","2.0split","1.9split","1.8split","1.7split","1.6split","1.5split","1.4split"],"database_specific":{"vanir_signatures":[{"digest":{"line_hashes":["195892175625739598384565738886928693113","149253868867704403655622444990774444724","103492216121940087843497286654604125259","297680089826767714702311139057703178215","80842639067664548787265453842758717036","314010403109654087180972229494859459488"],"threshold":0.9},"id":"CVE-2025-48172-611254ad","signature_type":"Line","signature_version":"v1","source":"https://github.com/sumatrapdfreader/sumatrapdf/commit/08179946a745cf1605e4b9670942ec1a6e1f4c5d","target":{"file":"ext/CHMLib/chm_lib.c"},"deprecated":false},{"digest":{"function_hash":"286458521566129013419023656621431881358","length":739},"id":"CVE-2025-48172-c028f054","signature_type":"Function","signature_version":"v1","source":"https://github.com/sumatrapdfreader/sumatrapdf/commit/08179946a745cf1605e4b9670942ec1a6e1f4c5d","target":{"file":"ext/CHMLib/chm_lib.c","function":"_unmarshal_lzxc_reset_table"},"deprecated":false}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-48172.json","vanir_signatures_modified":"2026-08-12T15:13:52Z"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L"}]}