NULL Pointer Dereference in TeX Live 944e257
Summary
CVE-2023-46051: TeX Live 944e257 allows a NULL pointer dereference in texk/web2c/pdftexdir/tounicode.c. Affects texlive-bin versions 2020.20200327.54578-7 – 2025.20250727.75242+ds-5~hurd.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
TeX Live is a comprehensive distribution of the TeX typesetting system that offers a wide range of packages and tools for creating and formatting documents. The texk/web2c/pdftexdir/tounicode.c file in TeX Live 944e257 is susceptible to a NULL pointer dereference vulnerability.
Vulnerability Detail
The vulnerability occurs due to a NULL pointer being dereferenced in the tounicode.c file. This can lead to a crash or unexpected behavior in the application. It is important to note that there is a dispute regarding the categorization of this vulnerability, as it could be considered a usability problem rather than a security issue.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the TeX Live 944e257 distribution is vulnerable to a NULL pointer dereference in the tounicode.c file. It is important to stay updated with the latest patches and fixes to ensure the security and stability of the system. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for texlive-bin →
FAQ
TeX Live is a comprehensive distribution of the TeX typesetting system that provides a wide range of packages and tools for document creation and formatting.
A NULL pointer dereference occurs when a program attempts to access or manipulate memory using a pointer that has not been assigned a valid memory address (i.e., it points to NULL). This can lead to crashes or unexpected behavior.
The vulnerability could result in crashes or unexpected behavior in applications that utilize TeX Live 944e257. However, it is important to note that there is a dispute regarding the severity of this vulnerability.
Yes, it is recommended to update to a version of TeX Live that includes the necessary patches or fixes to address this vulnerability.
For more information about this vulnerability, you can refer to the source provided in the database_specific field of the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for texlive-bin.
