PT-2025-27952 · Chmlib+2 · Chmlib+2

Published 2025-07-04 · Updated 2025-07-09 · CVE-2025-48172

Positive Technologies (AI Summary)

CVSS v3.1

5.6

Medium

Base vector

AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions: CHMLib versions through 2bef8d0

Description: The issue is related to an integer overflow in the chm decompress block function in chm lib.c, which leads to a heap-based buffer overflow in the chm fetch bytes function. This problem affects products that use CHMLib, such as SumatraPDF.

Recommendations: For CHMLib versions through 2bef8d0, consider restricting access to the chm decompress block and chm fetch bytes functions until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2025-48172

OPENSUSE-SU-2025:15326-1

Affected Products

Chmlib

Debian

Sumatrapdf

References · 13

• 🔥 https://drive.google.com/file/d/1XpulFyCGlq7Szzg5RsH-eRwZ6OyuSozl/view?usp=sharing · Exploit
• https://osv.dev/vulnerability/CVE-2025-48172 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-48172 · Security Note
• https://ubuntu.com/security/CVE-2025-48172 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-48172 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-48172 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15326-1 · Vendor Advisory
• https://github.com/sumatrapdfreader/sumatrapdf/commit/08179946a745cf1605e4b9670942ec1a6e1f4c5d · Note
• https://github.com/jedwing/CHMLib/blob/2bef8d063ec7d88a8de6fd9f0513ea42ac0fa21f/src/chm_lib.c#L1386 · Note
• https://twitter.com/VulmonFeeds/status/1941141821142266332 · Twitter Post
• https://drive.google.com/file/d/1wq51px42eoJz2VQ1Qu9ObPVQVom9T9H_/view?usp=sharing · Note
• https://t.me/cvenotify/127719 · Telegram Post
• https://suse.com/security/cve/CVE-2025-48172 · Note