Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-51885 EUVD-2023-56565GHSA-8h9j-pxfp-9p97

Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the length of the LaTeX s…

Published Jan 24, 2024 · Updated May 30, 2025 · Assigned by mitre

Description

Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the length of the LaTeX string component.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 12 mathtex No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS mathtex No fix yet —
Ubuntu 22.04 LTS mathtex No fix yet —
Ubuntu 20.04 LTS mathtex No fix yet —
Ubuntu 18.04 LTS mathtex No fix yet —
Ubuntu 16.04 LTS mathtex No fix yet —

References