CVE-2024-25262
texlive-bin commit c515e was discovered to contain heap buffer overflow via the function...
texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.
- Record
CVE-2024-25262- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H - Weakness
- CWE-122
- Updated
- 2026-11-02
EUVDEUVD-2024-22598
texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.
- Record
EUVD-2024-22598- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-79qr-9mf7-fr3g
texlive-bin commit c515e was discovered to contain heap buffer overflow via the function...
texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.
- Record
GHSA-79qr-9mf7-fr3g- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H - Weakness
- CWE-122
- Updated
- 2026-11-02
NVD
texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.
- Record
CVE-2024-25262- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H - Weakness
- CWE-122
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2024-25262
texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.
- Record
DEBIAN-CVE-2024-25262- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-2110
texlive-base security update
The TeX Live software distribution offers a complete TeX system for a variety of Unix, Macintosh, Windows and other platforms. It encompasses programs for editing, typesetting, previewing and printing of TeX documents in many different languages, and a large collection of TeX macros and font libraries.
Security Fix(es):
texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.(CVE-2024-25262)
- Record
OESA-2026-2110- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H - Updated
- 2026-11-02
Show 8 moreShow less
OSVOESA-2026-2111
texlive-base security update
The TeX Live software distribution offers a complete TeX system for a variety of Unix, Macintosh, Windows and other platforms. It encompasses programs for editing, typesetting, previewing and printing of TeX documents in many different languages, and a large collection of TeX macros and font libraries.
Security Fix(es):
texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.(CVE-2024-25262)
- Record
OESA-2026-2111- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-2112
texlive-base security update
The TeX Live software distribution offers a complete TeX system for a variety of Unix, Macintosh, Windows and other platforms. It encompasses programs for editing, typesetting, previewing and printing of TeX documents in many different languages, and a large collection of TeX macros and font libraries.
Security Fix(es):
texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.(CVE-2024-25262)
- Record
OESA-2026-2112- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-2113
texlive-base security update
The TeX Live software distribution offers a complete TeX system for a variety of Unix, Macintosh, Windows and other platforms. It encompasses programs for editing, typesetting, previewing and printing of TeX documents in many different languages, and a large collection of TeX macros and font libraries.
Security Fix(es):
texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.(CVE-2024-25262)
- Record
OESA-2026-2113- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-2114
texlive-base security update
The TeX Live software distribution offers a complete TeX system for a variety of Unix, Macintosh, Windows and other platforms. It encompasses programs for editing, typesetting, previewing and printing of TeX documents in many different languages, and a large collection of TeX macros and font libraries.
Security Fix(es):
texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.(CVE-2024-25262)
- Record
OESA-2026-2114- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-25262
texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.
- Record
UBUNTU-CVE-2024-25262- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H - Updated
- 2026-11-02
OSV No score
texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.
- Record
CVE-2024-25262- Updated
- 2026-11-02
OSVMGASA-2024-0108 No score
Updated texlive-20220321 packages fix security vulnerabilities
LuaTeX before 1.17.0 allows a document (compiled with the default settings) to make arbitrary network requests. This occurs because full access to the socket library is permitted by default, as stated in the documentation. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5. (CVE-2023-32668) texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file. (CVE-2024-25262)
- Record
MGASA-2024-0108- Updated
- 2026-11-02
OSVUSN-6695-1 No score
texlive-bin vulnerabilities
It was discovered that TeX Live incorrectly handled certain memory operations in the embedded axodraw2 tool. An attacker could possibly use this issue to cause TeX Live to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2019-18604)
It was discovered that TeX Live allowed documents to make arbitrary network requests. If a user or automated system were tricked into opening a specially crafted document, a remote attacker could possibly use this issue to exfiltrate sensitive information, or perform other network-related attacks. This issue only affected Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2023-32668)
It was discovered that TeX Live incorrectly handled certain TrueType fonts. If a user or automated system were tricked into opening a specially crafted TrueType font, a remote attacker could use this issue to cause TeX Live to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2024-25262)
- Record
USN-6695-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
texlive-binDebian:12 |
before 2022.20220321.62855-5.1+deb12u2, plus listed versions 2022.20220321.62855-5.12022.20220321.62855-5.1+deb12u1 |
2022.20220321.62855-5.1+deb12u2 |
texlive-binDebian:13 |
before 2023.20230311.66589-9 | 2023.20230311.66589-9 |
texlive-binDebian:14 |
before 2023.20230311.66589-9 | 2023.20230311.66589-9 |
texlive-binDebian:11 From an advisory covering 2 CVEs |
before 2020.20200327.54578-7+deb11u2, plus listed versions 2020.20200327.54578-72020.20200327.54578-7+deb11u1 |
2020.20200327.54578-7+deb11u2 |
texliveMageia:9 From an advisory covering 2 CVEs |
before 20220321-7.1.mga9 | 20220321-7.1.mga9 |
texlive-baseopenEuler:22.03-LTS-SP4 |
before 20180414-40.oe2203sp4 | 20180414-40.oe2203sp4 |
texlive-baseopenEuler:24.03-LTS |
before 20210325-13.oe2403 | 20210325-13.oe2403 |
texlive-baseopenEuler:24.03-LTS-SP1 |
before 20210325-13.oe2403sp1 | 20210325-13.oe2403sp1 |
texlive-baseopenEuler:24.03-LTS-SP3 |
before 20210325-13.oe2403sp3 | 20210325-13.oe2403sp3 |
texlive-baseopenEuler:20.03-LTS-SP4 |
before 20180414-35.oe2003sp4 | 20180414-35.oe2003sp4 |
Show 6 moreShow less
| Package | Affected | Fixed |
|---|---|---|
texlive-binUbuntu:Pro:16.04:LTS |
before 2015.20160222.37495-1ubuntu0.1+esm1, plus listed versions 2015.20150524.37493-5build12015.20150524.37493-72015.20150524.37493-7build12015.20150524.37493-7build42015.20160222.37495-12015.20160222.37495-1ubuntu0.1 |
2015.20160222.37495-1ubuntu0.1+esm1 |
texlive-binUbuntu:Pro:18.04:LTS |
before 2017.20170613.44572-8ubuntu0.2+esm1, plus listed versions 2017.20170613.44572-5build12017.20170613.44572-5build22017.20170613.44572-62017.20170613.44572-6build12017.20170613.44572-6ubuntu12017.20170613.44572-8build12017.20170613.44572-8ubuntu0.12017.20170613.44572-8ubuntu0.2 |
2017.20170613.44572-8ubuntu0.2+esm1 |
texlive-binUbuntu:20.04:LTS |
before 2019.20190605.51237-3ubuntu0.2, plus listed versions 2019.20190605.51237-2build12019.20190605.51237-32019.20190605.51237-3build12019.20190605.51237-3build22019.20190605.51237-3ubuntu0.1 |
2019.20190605.51237-3ubuntu0.2 |
texlive-binUbuntu:22.04:LTS |
before 2021.20210626.59705-1ubuntu0.2, plus listed versions 2020.20200327.54578-72020.20200327.54578-7build12021.20210626.59705-12021.20210626.59705-1build12021.20210626.59705-1ubuntu0.1 |
2021.20210626.59705-1ubuntu0.2 |
texlive-binUbuntu:20.04:LTS From an advisory covering 3 CVEs |
before 2019.20190605.51237-3ubuntu0.2, plus listed versions 2019.20190605.51237-2build12019.20190605.51237-32019.20190605.51237-3build12019.20190605.51237-3build22019.20190605.51237-3ubuntu0.1 |
2019.20190605.51237-3ubuntu0.2 |
texlive-binUbuntu:22.04:LTS From an advisory covering 3 CVEs |
before 2021.20210626.59705-1ubuntu0.2, plus listed versions 2020.20200327.54578-72020.20200327.54578-7build12021.20210626.59705-12021.20210626.59705-1build12021.20210626.59705-1ubuntu0.1 |
2021.20210626.59705-1ubuntu0.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-25262 is a high vulnerability (CVSS 8.1) in Tug Tex Live, published February 20, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.90%, the 59th percentile. Fixed in texlive-bin 2022.20220321.62855-5.1+deb12u2.
References
tug.org/svn/texlive/trunk/Build/source/texk/ttfdump/ChangeLog?revision=69605&view=co
bugs.launchpad.net/ubuntu/+source/texlive-bin/+bug/2047912
lists.debian.org/debian-lts-announce/2024/10/msg00032.html
nvd.nist.gov/vuln/detail/CVE-2024-25262
github.com/advisories/GHSA-79qr-9mf7-fr3g
security-tracker.debian.org/tracker/CVE-2024-25262
Show 13 moreShow less
advisories.mageia.org/MGASA-2024-0108.html
bugs.mageia.org/show_bug.cgi?id=32971
ubuntu.com/security/notices/USN-6695-1
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-2110
cve.org/CVERecord?id=CVE-2024-25262