CVE-2024-25262: Buffer Overflow
texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2024-25262?
CVE-2024-25262 has been classified with a severity level that could allow attackers to cause a Denial of Service (DoS).
How do I fix CVE-2024-25262?
To fix CVE-2024-25262, update texlive-bin to any of the patched versions: 2019.20190605.51237-3ubuntu0.2, 2021.20210626.59705-1ubuntu0.2, 2023.20230311.66589-6ubuntu0.1, or 2023.20230311.66589-9.
What causes CVE-2024-25262?
CVE-2024-25262 is caused by a heap buffer overflow in the function ttfLoadHDMX:ttfdump while processing a crafted TTF file.
Which versions of texlive-bin are affected by CVE-2024-25262?
CVE-2024-25262 affects versions of texlive-bin prior to the specific patched releases listed in the fix.
Can CVE-2024-25262 lead to data breaches?
While CVE-2024-25262 primarily enables Denial of Service attacks, it does not directly lead to data breaches.