CVE-2023-46051

2024-03-2700:00:00

ubuntu.com

tex live 944e257

null pointer dereference

pdftexdir

disputed

categorization

usability

cli tool

unix

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

DISPUTED TeX Live 944e257 allows a NULL pointer dereference in
texk/web2c/pdftexdir/tounicode.c. NOTE: this is disputed because it should
be categorized as a usability problem.

Notes

Author	Note
	Priority reason: Disputed crash in a CLI tool only

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchtexlive-bin< anyUNKNOWN
ubuntu20.04noarchtexlive-bin< anyUNKNOWN
ubuntu22.04noarchtexlive-bin< anyUNKNOWN
ubuntu23.10noarchtexlive-bin< anyUNKNOWN
ubuntu24.04noarchtexlive-bin< anyUNKNOWN
ubuntu16.04noarchtexlive-bin< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	texlive-bin	< any	UNKNOWN
ubuntu	20.04	noarch	texlive-bin	< any	UNKNOWN
ubuntu	22.04	noarch	texlive-bin	< any	UNKNOWN
ubuntu	23.10	noarch	texlive-bin	< any	UNKNOWN
ubuntu	24.04	noarch	texlive-bin	< any	UNKNOWN
ubuntu	16.04	noarch	texlive-bin	< any	UNKNOWN