Skip to content
OpenAdvisories

Package · Ubuntu

texlive-bin

18 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.6

    TeX Live SyncTeX Parser Heap Use-After-Free via Malformed SyncTeX File

    The SyncTeX parser (synctex_parser.c) shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that allows attackers to crash applications or potentially execute arbitrary code by supplying a…

  • Medium 5.5

    LuaTeX before 1.17.0 allows a document (compiled with the default settings) to make arbitrary network requests. This oc…