TL
Product
Tex Live
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 2Low 0
Watch
Add Tex Live to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-17513 | 8.8 | Dec 14 | TeX Live through 20170524 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct… Affected: through 20170524 |
| CVE-2024-25262 | 8.1 | Feb 20 | texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump Affected: c515e |
| CVE-2023-32700 | 7.8 | May 20 | LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source Affected: 2017 before 2023 |
| CVE-2018-17407 | 7.8 | Sep 23 | An issue was discovered in t1_check_unusual_charstring functions in writet1.c files in TeX Live before 2018-09-21 Affected: before 2018-09-21 |
Showing 4
