{"id":"CVE-2026-88361","details":"SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec() when parsing PDF PageLabels /Nums entries.","modified":"2026-09-27T08:03:01.631723Z","published":"2026-09-24T00:00:00Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/88xxx/CVE-2026-88361.json","cna_assigner":"mitre"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/88xxx/CVE-2026-88361.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88361"},{"type":"REPORT","url":"https://github.com/sumatrapdfreader/sumatrapdf/issues/5952"},{"type":"FIX","url":"https://github.com/chenjiefeng2001/sumatrapdf_folked/commit/b22a8c71ddc9de80ece5f88d14b434c20fee912e"},{"type":"FIX","url":"https://github.com/haimag/sumatrapdf/commit/8b999ff1bf0a8df244e75440682a3fd9a038eb2d"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/chenjiefeng2001/sumatrapdf_folked","events":[{"introduced":"0"},{"fixed":"b22a8c71ddc9de80ece5f88d14b434c20fee912e"}],"database_specific":{"source":"REFERENCES"}}],"versions":["v1.1.0-simd"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-88361.json","vanir_signatures_modified":"2026-09-27T08:03:01Z","vanir_signatures":[{"digest":{"function_hash":"191874070394615880881826176445384560185","length":1018},"id":"CVE-2026-88361-bcf9b463","signature_type":"Function","signature_version":"v1","source":"https://github.com/chenjiefeng2001/sumatrapdf_folked/commit/b22a8c71ddc9de80ece5f88d14b434c20fee912e","target":{"file":"src/EngineMupdf.cpp","function":"BuildPageLabelRec"},"deprecated":false},{"source":"https://github.com/chenjiefeng2001/sumatrapdf_folked/commit/b22a8c71ddc9de80ece5f88d14b434c20fee912e","target":{"file":"src/EngineMupdf.cpp"},"deprecated":false,"digest":{"line_hashes":["103419843585998220619481420118567966548","265127374609241147051723381016726127879","126352412400955012863168093043489978555","189076947827203599892084197070423835492","253633981282088994051091304121297778249","321443700280965110313184845874993786347","92661041186131680225161551976057196675","283398602493387706000575795247419565784","45505334799859981914475072080042727873","277711603200074236772469492499982160421","232460432730942694460286653159780739612","328841771763573300633890964065567684772","332084266802775960704404901815077591483"],"threshold":0.9},"id":"CVE-2026-88361-cdffdd40","signature_type":"Line","signature_version":"v1"}]}},{"ranges":[{"type":"GIT","repo":"https://github.com/haimag/sumatrapdf","events":[{"introduced":"0"},{"fixed":"8b999ff1bf0a8df244e75440682a3fd9a038eb2d"}],"database_specific":{"source":"REFERENCES"}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-88361.json","vanir_signatures_modified":"2026-09-27T08:03:01Z","vanir_signatures":[{"source":"https://github.com/haimag/sumatrapdf/commit/8b999ff1bf0a8df244e75440682a3fd9a038eb2d","target":{"file":"src/EngineMupdf.cpp"},"deprecated":false,"digest":{"line_hashes":["103419843585998220619481420118567966548","265127374609241147051723381016726127879","126352412400955012863168093043489978555","189076947827203599892084197070423835492","253633981282088994051091304121297778249","321443700280965110313184845874993786347","92661041186131680225161551976057196675","80013170756471999453685291697836227717","141281864912153749303363971601812446527","310753551417720173102772113739145920613","250018333589676265637908484632756431550"],"threshold":0.9},"id":"CVE-2026-88361-620515f5","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/haimag/sumatrapdf/commit/8b999ff1bf0a8df244e75440682a3fd9a038eb2d","target":{"function":"BuildPageLabelRec","file":"src/EngineMupdf.cpp"},"deprecated":false,"digest":{"function_hash":"309187069373612576301724466205078992752","length":1083},"id":"CVE-2026-88361-c68e8e23","signature_type":"Function"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}