2 results · Clear filters · Feed
-
Medium 6.6
TeX Live SyncTeX Parser Heap Use-After-Free via Malformed SyncTeX File
The SyncTeX parser (synctex_parser.c) shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that allows attackers to crash applications or potentially execute arbitrary code by supplying a…
-
Medium 5.5
LuaTeX before 1.17.0 allows a document (compiled with the default settings) to make arbitrary network requests. This oc…