CVE-2024-25262

2024-02-2900:00:00

ubuntu.com

texlive-bin

heap buffer overflow

dos

crafted ttf file

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

texlive-bin commit c515e was discovered to contain heap buffer overflow via
the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to
cause a Denial of Service (DoS) via supplying a crafted TTF file.

Bugs

<https://bugs.launchpad.net/ubuntu/+source/texlive-bin/+bug/2047912>

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchtexlive-bin< anyUNKNOWN
ubuntu20.04noarchtexlive-bin< 2019.20190605.51237-3ubuntu0.2UNKNOWN
ubuntu22.04noarchtexlive-bin< 2021.20210626.59705-1ubuntu0.2UNKNOWN
ubuntu23.10noarchtexlive-bin< 2023.20230311.66589-6ubuntu0.1UNKNOWN
ubuntu16.04noarchtexlive-bin< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	texlive-bin	< any	UNKNOWN
ubuntu	20.04	noarch	texlive-bin	< 2019.20190605.51237-3ubuntu0.2	UNKNOWN
ubuntu	22.04	noarch	texlive-bin	< 2021.20210626.59705-1ubuntu0.2	UNKNOWN
ubuntu	23.10	noarch	texlive-bin	< 2023.20230311.66589-6ubuntu0.1	UNKNOWN
ubuntu	16.04	noarch	texlive-bin	< any	UNKNOWN