What is GHSA-42pv-g2vh-7hf6?

GHSA-42pv-g2vh-7hf6 is a security advisory published by GitHub Security Advisories with High severity. SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec()...

Which CVE IDs does GHSA-42pv-g2vh-7hf6 cover?

GHSA-42pv-g2vh-7hf6 covers the following CVE IDs: CVE-2026-88361. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-42pv-g2vh-7hf6?

GHSA-42pv-g2vh-7hf6 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-42pv-g2vh-7hf6HighCVSS 7.5

SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec()...

Vendor

GitHub Security Advisories

Published

September 24, 2026

Last Modified

September 25, 2026

🔗 CVE IDs covered (1)

CVE-2026-88361 →

📋 Description

SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec() when parsing PDF PageLabels /Nums entries.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-88361
https://github.com/sumatrapdfreader/sumatrapdf/issues/5952
https://github.com/chenjiefeng2001/sumatrapdf_folked/commit/b22a8c71ddc9de80ece5f88d14b434c20fee912e
https://github.com/haimag/sumatrapdf/commit/8b999ff1bf0a8df244e75440682a3fd9a038eb2d
https://github.com/advisories/GHSA-42pv-g2vh-7hf6