VDB
GCVE-VVD-MAGEIA-2024-108
GCVE-VVD-MAGEIA-2024-108
Advisory Published
LuaTeX before 1.17.0 allows a document (compiled with the default
settings) to make arbitrary network requests. This occurs because full
access to the socket library is permitted by default, as stated in the
documentation. This also affects TeX Live before 2023 r66984 and MiKTeX
before 23.5. (CVE-2023-32668)
texlive-bin commit c515e was discovered to contain heap buffer overflow
via the function ttfLoadHDMX:ttfdump. This vulnerability allows
attackers to cause a Denial of Service (DoS) via supplying a crafted TTF
file. (CVE-2024-25262)
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | perl-Finance-Quote | 0 (affected), 1.590.0-1.mga9 (unaffected) | — |
| Mageia | texlive | 0 (affected), 20220321-7.1.mga9 (unaffected), 0 (affected), 20220321-7.1.mga9 (unaffected) | — |
References
Browse GCVE Records
100 records in the GCVE database · Updated April 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.