CVE-2026-8733

MediumCVSS 6.3

Published: 17/05/2026(UTC)Updated: 26/10/2026(UTC)Translated: 26/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

18th percentile - higher than 18% of all known CVEs

Summary

A vulnerability was found in Investintech SlimPDFReader up to 2.0.13 in the sub_3B4610 function of SlimPDFReader.exe. The manipulation results in a stack-based buffer overflow. The attack can be launched remotely and the exploit is publicly available. The vendor has discontinued the product.

Risk Assessment

A remote attacker could exploit the buffer overflow to execute arbitrary code or cause an application crash. Since the product is no longer supported, the risk remains unmitigated.

Recommendation

Discontinue use of Investintech SlimPDFReader and migrate to an actively supported alternative PDF reader. No patch is available to fix this vulnerability.

Other vulnerabilities in SlimPDFReader

CVE-2026-13522Medium
A security flaw has been discovered in SlimPDFReader up to version 2.0.14 in the function SlimPDFReader!Investintech::PCV::TeighaDo+0x25cde0 of SlimPDFReader.exe. Manipulation leads to an out-of-bounds read. The attack can be initiated remotely.

Original NVD description (English source)

A vulnerability was found in Investintech SlimPDFReader up to 2.0.13. Affected by this vulnerability is the function sub_3B4610 of the file SlimPDFReader.exe. The manipulation results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor responded to the initial vulnerability report by the researcher with a note that the product is discontinued. This vulnerability only affects products that are no longer supported by the maintainer.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS