4 results · Feed
-
Medium 6.6
TeX Live SyncTeX Parser Heap Use-After-Free via Malformed SyncTeX File
The SyncTeX parser (synctex_parser.c) shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that allows attackers to crash applications or potentially execute arbitrary code by supplying a…
-
Unscored —
KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.
-
Unscored —
okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" …
-
Unscored —
Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generato…