CVE-2024-25262
Published: 29 February 2024
texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
texlive-bin Launchpad, Ubuntu, Debian |
bionic |
Needs triage
|
| focal |
Released
(2019.20190605.51237-3ubuntu0.2)
|
|
| jammy |
Released
(2021.20210626.59705-1ubuntu0.2)
|
|
| mantic |
Released
(2023.20230311.66589-6ubuntu0.1)
|
|
| trusty |
Ignored
(end of standard support)
|
|
| upstream |
Released
(2023.20230311.66589-9)
|
|
| xenial |
Needs triage
|
|
|
Patches: upstream: https://github.com/TeX-Live/texlive-source/pull/63 |
||