CVE-2019-18604
In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other...
In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled.
- Record
CVE-2019-18604- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled.
- Record
CVE-2019-18604- Updated
- 2026-11-02
EUVDEUVD-2019-8338 No score
In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled.
- Record
EUVD-2019-8338- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hfg3-f7fm-c9xc
In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other...
In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled.
- Record
GHSA-hfg3-f7fm-c9xc- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
OSV
In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled.
- Record
CVE-2019-18604- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-18604
In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled.
- Record
DEBIAN-CVE-2019-18604- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-18604
In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled.
- Record
UBUNTU-CVE-2019-18604- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11431-1 No score
libkpathsea6-6.3.3-76.3 on GA media
These are all security issues fixed in the libkpathsea6-6.3.3-76.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11431-1- Updated
- 2026-11-02
OSVUSN-6695-1 No score
texlive-bin vulnerabilities
It was discovered that TeX Live incorrectly handled certain memory operations in the embedded axodraw2 tool. An attacker could possibly use this issue to cause TeX Live to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2019-18604)
It was discovered that TeX Live allowed documents to make arbitrary network requests. If a user or automated system were tricked into opening a specially crafted document, a remote attacker could possibly use this issue to exfiltrate sensitive information, or perform other network-related attacks. This issue only affected Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2023-32668)
It was discovered that TeX Live incorrectly handled certain TrueType fonts. If a user or automated system were tricked into opening a specially crafted TrueType font, a remote attacker could use this issue to cause TeX Live to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2024-25262)
- Record
USN-6695-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
texlive-binDebian:12 |
before 2020.20200327.54578-2 | 2020.20200327.54578-2 |
texlive-binDebian:13 |
before 2020.20200327.54578-2 | 2020.20200327.54578-2 |
texlive-binDebian:14 |
before 2020.20200327.54578-2 | 2020.20200327.54578-2 |
texlive-binDebian:10 |
before 2018.20181218.49446-1+deb10u2, plus listed versions 2018.20181218.49446-12018.20181218.49446-1+deb10u1 |
2018.20181218.49446-1+deb10u2 |
texlive-binUbuntu:20.04:LTS |
before 2019.20190605.51237-3ubuntu0.2, plus listed versions 2019.20190605.51237-2build12019.20190605.51237-32019.20190605.51237-3build12019.20190605.51237-3build22019.20190605.51237-3ubuntu0.1 |
2019.20190605.51237-3ubuntu0.2 |
texlive-binUbuntu:20.04:LTS From an advisory covering 3 CVEs |
before 2019.20190605.51237-3ubuntu0.2, plus listed versions 2019.20190605.51237-2build12019.20190605.51237-32019.20190605.51237-3build12019.20190605.51237-3build22019.20190605.51237-3ubuntu0.1 |
2019.20190605.51237-3ubuntu0.2 |
texlive-binUbuntu:22.04:LTS From an advisory covering 3 CVEs |
before 2021.20210626.59705-1ubuntu0.2, plus listed versions 2020.20200327.54578-72020.20200327.54578-7build12021.20210626.59705-12021.20210626.59705-1build12021.20210626.59705-1ubuntu0.1 |
2021.20210626.59705-1ubuntu0.2 |
texliveopenSUSE:Tumbleweed From an advisory covering 4 CVEs |
before 2021.20210325.svn34398-76.3 | 2021.20210325.svn34398-76.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-18604 is a critical vulnerability (CVSS 9.8) in Axodraw2 Project Axodraw2, published October 29, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.88%, the 79th percentile. Fixed in texlive-bin 2020.20200327.54578-2.
References
github.com/TeX-Live/texlive-source/commit/9216833a3888a4105a18e8c349f65b045ddb1079
lists.debian.org/debian-lts-announce/2023/05/msg00033.html
nvd.nist.gov/vuln/detail/CVE-2019-18604
security-tracker.debian.org/tracker/CVE-2019-18604
ubuntu.com/security/CVE-2019-18604