Segmentation Violation in OTFCC Commit 617837b in texlive-bin
Summary
CVE-2022-35022: OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6badae. Affects texlive-bin versions 2022.20220321.62855-5.1 – 2025.20250727.75242+ds-5~hurd.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
texlive-bin is a package in the Debian ecosystem that provides the binaries for the TeX Live distribution. It includes various tools and utilities for working with TeX documents. The package is widely used by developers and users for typesetting and formatting documents. However, a vulnerability has been discovered in the package's OTFCC commit 617837b, which can lead to a segmentation violation.
Vulnerability Detail
The vulnerability (CVE-2022-35022) in OTFCC commit 617837b of texlive-bin results in a segmentation violation. This violation occurs in the /release-x64/otfccdump+0x6badae function. A segmentation violation can cause the program to crash or behave unpredictably. In this case, it can potentially lead to a denial of service (DoS) attack or the execution of arbitrary code. The vulnerability has a CVSS score of 6.5, indicating a moderate severity.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
At the moment, there is no known workaround for this vulnerability. Users are advised to apply the official fix or patch as soon as it becomes available.
Conclusion
In conclusion, the vulnerability in OTFCC commit 617837b of texlive-bin can lead to a segmentation violation, potentially resulting in a denial of service (DoS) attack or the execution of arbitrary code. Users should update the texlive-bin package to a fixed version or apply the necessary patches as soon as they become available. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for texlive-bin →
FAQ
texlive-bin is a package in the Debian ecosystem that provides the binaries for the TeX Live distribution. It includes various tools and utilities for working with TeX documents.
A segmentation violation, also known as a segmentation fault, occurs when a program tries to access a memory location that it is not allowed to access. This can happen due to programming errors or vulnerabilities and can cause the program to crash or behave unpredictably.
The vulnerability in OTFCC commit 617837b of texlive-bin can potentially lead to a denial of service (DoS) attack or the execution of arbitrary code. It can cause the program to crash or behave unpredictably.
The CVSS score of this vulnerability is 6.5, indicating a moderate severity.
To fix this vulnerability, it is recommended to update the texlive-bin package to a version that includes the necessary patches. Check for updates from the official Debian repositories or the texlive-bin project's website.
Related vulnerabilities
Recent vulnerabilities recorded for texlive-bin.
