{"id":"CVE-2024-25262","aliases":["DEBIAN-CVE-2024-25262","DLA-3941-1","EUVD-2024-22598","GHSA-79qr-9mf7-fr3g","MGASA-2024-0108","OESA-2026-2110","OESA-2026-2111","OESA-2026-2112","OESA-2026-2113","OESA-2026-2114","UBUNTU-CVE-2024-25262","USN-6695-1"],"status":"published","title":"texlive-bin commit c515e was discovered to contain heap buffer overflow via the function...","description":"texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00895,"percentile":0.59808,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122"],"published":"2024-02-20T00:00:00Z","modified":"2026-11-02T12:01:00Z","fixes":[{"ecosystem":"Debian:12","package":"texlive-bin","fixed_in":["2022.20220321.62855-5.1+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"texlive-bin","fixed_in":["2023.20230311.66589-9"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"texlive-bin","fixed_in":["2023.20230311.66589-9"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"texlive-base","fixed_in":["20180414-40.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"texlive-base","fixed_in":["20210325-13.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"texlive-base","fixed_in":["20210325-13.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"texlive-base","fixed_in":["20210325-13.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"texlive-base","fixed_in":["20180414-35.oe2003sp4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"texlive-bin","fixed_in":["2015.20160222.37495-1ubuntu0.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"texlive-bin","fixed_in":["2017.20170613.44572-8ubuntu0.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"texlive-bin","fixed_in":["2019.20190605.51237-3ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"texlive-bin","fixed_in":["2021.20210626.59705-1ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"texlive-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.20220321.62855-5.1+deb12u2"}]}],"versions":["2022.20220321.62855-5.1","2022.20220321.62855-5.1+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"texlive-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2023.20230311.66589-9"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"texlive-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2023.20230311.66589-9"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"texlive-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2020.20200327.54578-7+deb11u2"}]}],"versions":["2020.20200327.54578-7","2020.20200327.54578-7+deb11u1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:9","package":"texlive","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220321-7.1.mga9"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"texlive-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180414-40.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"texlive-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210325-13.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"texlive-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210325-13.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"texlive-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210325-13.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"texlive-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180414-35.oe2003sp4"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"texlive-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2015.20160222.37495-1ubuntu0.1+esm1"}]}],"versions":["2015.20150524.37493-5build1","2015.20150524.37493-7","2015.20150524.37493-7build1","2015.20150524.37493-7build4","2015.20160222.37495-1","2015.20160222.37495-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"texlive-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017.20170613.44572-8ubuntu0.2+esm1"}]}],"versions":["2017.20170613.44572-5build1","2017.20170613.44572-5build2","2017.20170613.44572-6","2017.20170613.44572-6build1","2017.20170613.44572-6ubuntu1","2017.20170613.44572-8build1","2017.20170613.44572-8ubuntu0.1","2017.20170613.44572-8ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"texlive-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2019.20190605.51237-3ubuntu0.2"}]}],"versions":["2019.20190605.51237-2build1","2019.20190605.51237-3","2019.20190605.51237-3build1","2019.20190605.51237-3build2","2019.20190605.51237-3ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"texlive-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.20210626.59705-1ubuntu0.2"}]}],"versions":["2020.20200327.54578-7","2020.20200327.54578-7build1","2021.20210626.59705-1","2021.20210626.59705-1build1","2021.20210626.59705-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"texlive-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2019.20190605.51237-3ubuntu0.2"}]}],"versions":["2019.20190605.51237-2build1","2019.20190605.51237-3","2019.20190605.51237-3build1","2019.20190605.51237-3build2","2019.20190605.51237-3ubuntu0.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"texlive-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.20210626.59705-1ubuntu0.2"}]}],"versions":["2020.20200327.54578-7","2020.20200327.54578-7build1","2021.20210626.59705-1","2021.20210626.59705-1build1","2021.20210626.59705-1ubuntu0.1"],"bundled":3}],"products":[{"vendor":"tug","product":"tex_live"}],"references":[{"url":"https://tug.org/svn/texlive/trunk/Build/source/texk/ttfdump/ChangeLog?revision=69605\u0026view=co","tags":["x_transferred","web"]},{"url":"https://bugs.launchpad.net/ubuntu/+source/texlive-bin/+bug/2047912","tags":["x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/10/msg00032.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-25262","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-79qr-9mf7-fr3g"},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-25262","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0108.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32971","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6695-1","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2110","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2111","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2112","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2113","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2114","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-25262","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-25262","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7985-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-18604","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-32668","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2024-25262","description":"texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.","status":"published","published":"2024-02-20T00:00:00Z","modified":"2025-11-03T21:54:04.024Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:34:04.00829Z"}],"euvd":[{"id":"EUVD-2024-22598","description":"texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.","status":"published","published":"2024-02-20T00:00:00Z","modified":"2025-11-03T21:54:04Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:30.274226Z"}],"ghsa":[{"id":"GHSA-79qr-9mf7-fr3g","title":"texlive-bin commit c515e was discovered to contain heap buffer overflow via the function...","description":"texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.","status":"published","published":"2024-02-29T03:33:18Z","modified":"2025-11-04T00:31:53Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:04:29.580531Z"}],"nvd":[{"id":"CVE-2024-25262","description":"texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.","status":"published","published":"2024-02-29T01:44:15.367Z","modified":"2026-06-17T07:15:47.467Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:09:38.473056Z"}],"osv":[{"id":"DEBIAN-CVE-2024-25262","description":"texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.","status":"published","published":"2024-02-29T01:44:15.367Z","modified":"2026-11-02T12:01:00.279071387Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:41.849198Z"},{"id":"OESA-2026-2110","title":"texlive-base security update","description":"The TeX Live software distribution offers a complete TeX system for a variety of Unix, Macintosh, Windows and other platforms. It encompasses programs for editing, typesetting, previewing and printing of TeX documents in many different languages, and a large collection of TeX macros and font libraries.\r\n\r\nSecurity Fix(es):\n\ntexlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.(CVE-2024-25262)","status":"published","published":"2026-04-25T11:11:06Z","modified":"2026-08-18T01:19:49.65547539Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-2111","title":"texlive-base security update","description":"The TeX Live software distribution offers a complete TeX system for a variety of Unix, Macintosh, Windows and other platforms. It encompasses programs for editing, typesetting, previewing and printing of TeX documents in many different languages, and a large collection of TeX macros and font libraries.\r\n\r\nSecurity Fix(es):\n\ntexlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.(CVE-2024-25262)","status":"published","published":"2026-04-25T11:11:06Z","modified":"2026-08-18T01:19:49.605801116Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-2112","title":"texlive-base security update","description":"The TeX Live software distribution offers a complete TeX system for a variety of Unix, Macintosh, Windows and other platforms. It encompasses programs for editing, typesetting, previewing and printing of TeX documents in many different languages, and a large collection of TeX macros and font libraries.\r\n\r\nSecurity Fix(es):\n\ntexlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.(CVE-2024-25262)","status":"published","published":"2026-04-25T11:11:06Z","modified":"2026-08-18T01:19:49.877258838Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-2113","title":"texlive-base security update","description":"The TeX Live software distribution offers a complete TeX system for a variety of Unix, Macintosh, Windows and other platforms. It encompasses programs for editing, typesetting, previewing and printing of TeX documents in many different languages, and a large collection of TeX macros and font libraries.\r\n\r\nSecurity Fix(es):\n\ntexlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.(CVE-2024-25262)","status":"published","published":"2026-04-25T11:11:06Z","modified":"2026-08-18T01:19:49.607033804Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-2114","title":"texlive-base security update","description":"The TeX Live software distribution offers a complete TeX system for a variety of Unix, Macintosh, Windows and other platforms. It encompasses programs for editing, typesetting, previewing and printing of TeX documents in many different languages, and a large collection of TeX macros and font libraries.\r\n\r\nSecurity Fix(es):\n\ntexlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.(CVE-2024-25262)","status":"published","published":"2026-04-25T11:11:06Z","modified":"2026-08-18T01:19:49.828090721Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"UBUNTU-CVE-2024-25262","description":"texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.","status":"published","published":"2024-02-29T01:44:00Z","modified":"2026-04-22T14:41:55.735452Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:42.68848Z"},{"id":"CVE-2024-25262","description":"texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.","status":"published","published":"2024-02-29T01:44:15Z","modified":"2026-04-16T04:43:44.095970673Z","updated_at":"2026-11-02T15:44:38.897406Z"},{"id":"DLA-3941-1","title":"texlive-bin - security update","status":"published","published":"2024-10-29T00:00:00Z","modified":"2026-03-09T01:23:00.927737Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2024-0108","title":"Updated texlive-20220321 packages fix security vulnerabilities","description":"LuaTeX before 1.17.0 allows a document (compiled with the default\nsettings) to make arbitrary network requests. This occurs because full\naccess to the socket library is permitted by default, as stated in the\ndocumentation. This also affects TeX Live before 2023 r66984 and MiKTeX\nbefore 23.5. (CVE-2023-32668)\ntexlive-bin commit c515e was discovered to contain heap buffer overflow\nvia the function ttfLoadHDMX:ttfdump. This vulnerability allows\nattackers to cause a Denial of Service (DoS) via supplying a crafted TTF\nfile. (CVE-2024-25262)\n","status":"published","published":"2024-04-05T18:24:25Z","modified":"2026-04-16T04:43:14.775441598Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"USN-6695-1","title":"texlive-bin vulnerabilities","description":"It was discovered that TeX Live incorrectly handled certain memory\noperations in the embedded axodraw2 tool. An attacker could possibly use\nthis issue to cause TeX Live to crash, resulting in a denial of service.\nThis issue only affected Ubuntu 20.04 LTS. (CVE-2019-18604)\n\nIt was discovered that TeX Live allowed documents to make arbitrary\nnetwork requests. If a user or automated system were tricked into opening a\nspecially crafted document, a remote attacker could possibly use this issue\nto exfiltrate sensitive information, or perform other network-related\nattacks. This issue only affected Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS.\n(CVE-2023-32668)\n\nIt was discovered that TeX Live incorrectly handled certain TrueType fonts.\nIf a user or automated system were tricked into opening a specially crafted\nTrueType font, a remote attacker could use this issue to cause TeX Live to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. (CVE-2024-25262)\n","status":"published","published":"2024-03-14T11:45:28Z","modified":"2026-04-22T10:45:10.147302Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}