Segmentation Violation in OTFCC Commit 617837b in texlive-bin
Summary
CVE-2022-35024: OTFCC commit 617837b was discovered to contain a segmentation violation via /multiarch/memmove-vec-unaligned-erms.S. Affects texlive-bin versions 2022.20220321.62855-5.1 – 2025.20250727.75242+ds-5~hurd.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
texlive-bin is a package in the Debian ecosystem that provides the TeX Live distribution. It includes various tools and libraries for typesetting documents using TeX. The package is widely used for academic and professional document preparation. However, a vulnerability has been discovered in the package's OTFCC commit 617837b, which can lead to a segmentation violation.
Vulnerability Detail
The vulnerability in OTFCC commit 617837b of texlive-bin is caused by a segmentation violation in the /multiarch/memmove-vec-unaligned-erms.S file. This violation can be exploited by an attacker to cause the program to crash or potentially execute arbitrary code. The impact of this vulnerability can range from denial of service to remote code execution, depending on how it is exploited. The vulnerability has a CVSS score of 6.5, indicating a moderate severity.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
At the moment, there is no known workaround for this vulnerability. It is crucial to update the texlive-bin package to a patched version as soon as it becomes available.
Conclusion
In conclusion, the OTFCC commit 617837b in texlive-bin has a vulnerability that can lead to a segmentation violation. It is important to update the package to a patched version as soon as possible to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for texlive-bin →
FAQ
texlive-bin is a package in the Debian ecosystem that provides the TeX Live distribution. It includes various tools and libraries for typesetting documents using TeX.
The vulnerability can lead to a segmentation violation, potentially causing the program to crash or allowing an attacker to execute arbitrary code.
The CVSS score of this vulnerability is 6.5, indicating a moderate severity.
Currently, there is no known workaround for this vulnerability. It is recommended to update the texlive-bin package to a patched version.
To protect your system, regularly check for updates to the texlive-bin package and apply them promptly once a patched version is available.
Related vulnerabilities
Recent vulnerabilities recorded for texlive-bin.
