Skip to content
OpenAdvisories

Package · Debian

okular

4 known vulnerabilities.

4 results · Feed

  • Medium 6.6

    TeX Live SyncTeX Parser Heap Use-After-Free via Malformed SyncTeX File

    The SyncTeX parser (synctex_parser.c) shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that allows attackers to crash applications or potentially execute arbitrary code by supplying a…

  • Unscored —

    KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.

  • Unscored —

    okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" …

  • Unscored —

    Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generato…