EUVD-2026-40019
GHSA-3pg9-gwgr-fmmw
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
PDF delivery is network-reachable but requires user to open the file (UI:R); impact is limited to an application crash with no confidentiality or integrity effect (C:N/I:N/A:L).
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
3DescriptionCVE.org
A security flaw has been discovered in Investintech SlimPDFReader up to 2.0.14. Affected by this issue is the function SlimPDFReader!Investintech::PCV::TeighaDo+0x25cde0 of the file SlimPDFReader.exe of the component PDF File Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. This vulnerability only affects products that are no longer supported by the maintainer.
AnalysisAI
Out-of-bounds read in Investintech SlimPDFReader through version 2.0.14 exposes users to application crashes when processing maliciously crafted PDF files, exploitable remotely with passive user interaction. The vulnerable function SlimPDFReader!Investintech::PCV::TeighaDo+0x25cde0 within SlimPDFReader.exe fails to validate buffer boundaries during PDF parsing, resulting in a low-severity availability impact (application crash/DoS) with no confirmed confidentiality or integrity effect despite the 'Information Disclosure' tag in source metadata. No public exploit identified at time of analysis beyond the CVSS 4.0 E:P maturity indicator, and no patch will ever be released as the product is confirmed end-of-life.
Technical ContextAI
SlimPDFReader is a Windows-native PDF viewer developed by Investintech. The vulnerability resides in the PDF File Handler component, specifically the function SlimPDFReader!Investintech::PCV::TeighaDo+0x25cde0 inside SlimPDFReader.exe. CWE-125 (Out-of-bounds Read) identifies the root cause: the PDF parser reads beyond the allocated buffer boundary when processing attacker-controlled PDF structure data, likely due to missing or insufficient validation of length fields or object offsets embedded in the PDF format. This class of flaw is common in file-format parsers that trust embedded size or count values without bounds-checking them against actual buffer capacity. Notably, the VulDB source tags this as 'Buffer Overflow', but the assigned CWE-125 is more precise - an out-of-bounds read does not imply write capability or code execution. The CPE cpe:2.3:a:investintech:slimpdfreader:*:*:*:*:*:*:*:* covers all releases through 2.0.14 with no lower bound specified, implying the entire product version history is affected.
RemediationAI
No vendor-released patch identified at time of analysis - the product is confirmed end-of-life and Investintech will not issue a fix. The primary remediation is to uninstall SlimPDFReader entirely and migrate to a currently supported PDF viewer such as Adobe Acrobat Reader, Foxit PDF Reader, or a Chromium-based browser's built-in PDF renderer, all of which receive active security maintenance. As an immediate compensating control, restrict or block execution of SlimPDFReader.exe via application allowlisting tools such as Windows Defender Application Control (WDAC) or AppLocker - this fully prevents exploitation but eliminates the application's functionality. Alternatively, enforce a policy prohibiting users from opening PDF files received from untrusted or external sources with this application; this reduces exposure but does not eliminate risk for socially engineered scenarios. VulDB disclosure: https://vuldb.com/vuln/374530.
More in Slimpdfreader
View allSame weakness CWE-125 – Out-of-bounds Read
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today