CVE-2012-5340

HIGH

SumatraPDF 2.1.1/MuPDF 1.0 - Memory Corruption

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2012-5340. PoCs published by beford.

AI-analyzed exploit summary The exploit demonstrates an integer overflow in MuPDF's lex_number() function, which can be triggered via a malformed PDF file with ObjStm. This leads to a user-mode write access violation, potentially allowing arbitrary memory writes.

Description

SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file.

Exploits (1)

exploitdb WORKING POC VERIFIED
by beford · textdoswindows
https://www.exploit-db.com/exploits/23246

The exploit demonstrates an integer overflow in MuPDF's lex_number() function, which can be triggered via a malformed PDF file with ObjStm. This leads to a user-mode write access violation, potentially allowing arbitrary memory writes.

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Moderate
Reliability
Reliable
Target: MuPDF 1.0, MuPDF for iOS 1.1, SumatraPDF 2.1.1
No auth needed
Prerequisites: A malformed PDF file with crafted ObjStm to trigger the integer overflow
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3

Scores

CVSS v3 7.8
EPSS 0.0573
EPSS Percentile 92.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-190
Status published
Products (3)
artifex/mupdf 1.0
artifex/mupdf 1.1
sumatrapdfreader/sumatrapdf 2.1.1
Published Jan 23, 2020
Tracked Since Feb 18, 2026