Summary
It was discovered that the vendored LibTIFF in Texmaker incorrectly
handled memory when parsing malformed TIFF image metadata. An attacker
could possibly use this issue to cause a denial of service, obtain
sensitive information, or execute arbitrary code.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | texmaker | 5.0.2-1ubuntu0.1~esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | texmaker | 5.0.3-1ubuntu0.20.04.1~esm1 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | texmaker | 5.0.3-1ubuntu0.22.04.1~esm1 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | texmaker | 5.1.3+dfsg-1ubuntu0.1~esm1 |
References
-
report
https://ubuntu.com/security/CVE-2025-9900