https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 17:23:36 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-374846 EUVD-2026-374846 https://cve.radiocsirt.org/vuln/euvd-2026-374846 https://cve.radiocsirt.org/vuln/fkie_cve-2026-63729 <p>The SyncTeX parser (synctex_parser.c) shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that allows attackers to crash applications or potentially execute arbitrary code by supplying a malformed .synctex or .synctex.gz file. A malformed SyncTeX file can construct a ref node with a NULL parent pointer, causing the replacement routine to fail to detach the node from its sibling chain, which triggers recursive freeing of live tree nodes and leaves dangling pointers that are later accessed by the parser during document load.</p> <p>The SyncTeX parser (synctex_parser.c) shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that allows attackers to crash applications or potentially execute arbitrary code by supplying a malformed .synctex or .synctex.gz file. A malformed SyncTeX file can construct a ref node with a NULL parent pointer, causing the replacement routine to fail to detach the node from its sibling chain, which triggers recursive freeing of live tree nodes and leaves dangling pointers that are later accessed by the parser during document load.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-63729 https://cve.radiocsirt.org/vuln/ghsa-jf22-92mg-7xxh <p>The SyncTeX parser (synctex_parser.c) shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that allows attackers to crash applications or potentially execute arbitrary code by supplying a malformed .synctex or .synctex.gz file. A malformed SyncTeX file can construct a ref node with a NULL parent pointer, causing the replacement routine to fail to detach the node from its sibling chain, which triggers recursive freeing of live tree nodes and leaves dangling pointers that are later accessed by the parser during document load.</p> <p>The SyncTeX parser (synctex_parser.c) shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that allows attackers to crash applications or potentially execute arbitrary code by supplying a malformed .synctex or .synctex.gz file. A malformed SyncTeX file can construct a ref node with a NULL parent pointer, causing the replacement routine to fail to detach the node from its sibling chain, which triggers recursive freeing of live tree nodes and leaves dangling pointers that are later accessed by the parser during document load.</p> https://cve.radiocsirt.org/vuln/ghsa-jf22-92mg-7xxh https://cve.radiocsirt.org/vuln/oesa-2026-3192 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: texlive-base, openEuler:22.03-LTS-SP4: texlive-base, openEuler:24.03-LTS-SP1: texlive-base, openEuler:24.03-LTS-SP3: texlive-base, openEuler:24.03-LTS-SP4: texlive-base</p> <p>The TeX Live software distribution offers a complete TeX system for a variety of Unix, Macintosh, Windows and other platforms. It encompasses programs for editing, typesetting, previewing and printing of TeX documents in many different languages, and a large collection of TeX macros and font libraries. Security Fix(es):</p> <p>The SyncTeX parser (synctex_parser.c) shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that allows attackers to crash applications or potentially execute arbitrary code by supplying a malformed .synctex or .synctex.gz file. A malformed SyncTeX file can construct a ref node with a NULL parent pointer, causing the replacement routine to fail to detach the node from its sibling chain, which triggers recursive freeing of live tree nodes and leaves dangling pointers that are later accessed by the parser during document load.(CVE-2026-63729)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: texlive-base, openEuler:22.03-LTS-SP4: texlive-base, openEuler:24.03-LTS-SP1: texlive-base, openEuler:24.03-LTS-SP3: texlive-base, openEuler:24.03-LTS-SP4: texlive-base</p> <p>The TeX Live software distribution offers a complete TeX system for a variety of Unix, Macintosh, Windows and other platforms. It encompasses programs for editing, typesetting, previewing and printing of TeX documents in many different languages, and a large collection of TeX macros and font libraries. Security Fix(es):</p> <p>The SyncTeX parser (synctex_parser.c) shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that allows attackers to crash applications or potentially execute arbitrary code by supplying a malformed .synctex or .synctex.gz file. A malformed SyncTeX file can construct a ref node with a NULL parent pointer, causing the replacement routine to fail to detach the node from its sibling chain, which triggers recursive freeing of live tree nodes and leaves dangling pointers that are later accessed by the parser during document load.(CVE-2026-63729)</p> https://cve.radiocsirt.org/vuln/oesa-2026-3192 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11412-1 <p>evince-48.4-2.1 on GA media</p> <p>evince-48.4-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11412-1 https://cve.radiocsirt.org/vuln/suse-su-2026:3924-1 <p>Security update for texlive</p> <p>Security update for texlive</p> https://cve.radiocsirt.org/vuln/suse-su-2026:3924-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-63729 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: texlive-bin, Ubuntu:Pro:18.04:LTS: texlive-bin, Ubuntu:Pro:20.04:LTS: texlive-bin, Ubuntu:22.04:LTS: texlive-bin, Ubuntu:24.04:LTS: texlive-bin, Ubuntu:26.04:LTS: texlive-bin</p> <p>The SyncTeX parser (synctex_parser.c) shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that allows attackers to crash applications or potentially execute arbitrary code by supplying a malformed .synctex or .synctex.gz file. A malformed SyncTeX file can construct a ref node with a NULL parent pointer, causing the replacement routine to fail to detach the node from its sibling chain, which triggers recursive freeing of live tree nodes and leaves dangling pointers that are later accessed by the parser during document load.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: texlive-bin, Ubuntu:Pro:18.04:LTS: texlive-bin, Ubuntu:Pro:20.04:LTS: texlive-bin, Ubuntu:22.04:LTS: texlive-bin, Ubuntu:24.04:LTS: texlive-bin, Ubuntu:26.04:LTS: texlive-bin</p> <p>The SyncTeX parser (synctex_parser.c) shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that allows attackers to crash applications or potentially execute arbitrary code by supplying a malformed .synctex or .synctex.gz file. A malformed SyncTeX file can construct a ref node with a NULL parent pointer, causing the replacement routine to fail to detach the node from its sibling chain, which triggers recursive freeing of live tree nodes and leaves dangling pointers that are later accessed by the parser during document load.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-63729