Vulnerability of t1_check_unusual_charstring in the TeX Live typesetting system, allowing a hacker to execute arbitrary code

The vulnerability of the t1checkunusualcharstring function in the TeX Live typesetting system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code by loading malicious fonts...

Scientific Linux Security Update : texlive on SL7.x x86_64 (20200407)

texlive: Buffer overflow in t1checkunusualcharstring function in writet1.c C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135840; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15";...

DEBIAN-CVE-2018-17407

An issue was discovered in t1checkunusualcharstring functions in writet1.c files in TeX Live before 2018-09-21. A buffer overflow in the handling of Type 1 fonts allows arbitrary code execution when a malicious font is loaded by one of the vulnerable tools: pdflatex, pdftex, dvips, or luatex...