$ cve CVE-2012-5340 JSON

CVE-2012-5340 EXPLOIT

7.8

HIGH · CVSS 3.1 · EPSS 5.7% (pctl 93)

Patch early

A public exploit exists.

SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file.

CVSS	7.8 (HIGH, v3.1)
Vector	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS	5.73% — more likely to be exploited than 93% of all CVEs
Weakness	CWE-190
On CISA KEV	no
Public exploit	yes
Published	2020-01-23
Last modified	2026-06-16

Vendor	Product
artifex	mupdf
sumatrapdfreader	sumatrapdf

Source	Title	Date
exploit-db	SumatraPDF 2.1.1/MuPDF 1.0 - Integer Overflow	2012-12-09