Description
A security flaw has been discovered in Investintech SlimPDFReader up to 2.0.14. Affected by this issue is the function SlimPDFReader!Investintech::PCV::TeighaDo+0x25cde0 of the file SlimPDFReader.exe of the component PDF File Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. This vulnerability only affects products that are no longer supported by the maintainer.
Severity (CVSS)
| Base score | 5.3 |
|---|---|
| Severity | Medium |
| Version | CVSS 4.0 |
| Vector | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P |
| Provided by | CNA |
Weaknesses
- CWE-125 — Out-of-Bounds Read
- CWE-119 — Memory Corruption
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Investintech | SlimPDFReader | 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; 2.0.6; 2.0.7; 2.0.8; 2.0.9; 2.0.10; 2.0.11; 2.0.12; 2.0.13; 2.0.14 |
References
- https://vuldb.com/vuln/374530 (vdb-entry technical-description)
- https://vuldb.com/vuln/374530/cti (signature permissions-required)
- https://vuldb.com/cve/CVE-2026-13522 (third-party-advisory)
- https://vuldb.com/submit/839637 (third-party-advisory)
Generated from the official CVE List on 29 Jun 2026 07:08 UTC.