Segmentation Violation in texlive-bin Package: CVE-2022-35024
Summary
DEBIAN-CVE-2022-35024: OTFCC commit 617837b was discovered to contain a segmentation violation via /multiarch/memmove-vec-unaligned-erms.S. Affects texlive-bin versions 2022.20220321.62855-5.1 – 2025.20250727.75242+ds-5~hurd.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The texlive-bin package is a crucial component of the TeX Live distribution, which provides a comprehensive suite for typesetting documents. It includes various binaries and scripts necessary for processing TeX documents. This package is widely used in academic and professional settings for producing high-quality typeset documents. However, it has been identified to contain a vulnerability that could lead to segmentation violations, potentially affecting the stability and security of applications relying on it.
Vulnerability Detail
The vulnerability, identified as CVE-2022-35024, originates from a specific commit in the OTFCC codebase (commit 617837b). It manifests as a segmentation violation due to improper memory handling in the multiarch/memmove-vec-unaligned-erms.S file. This flaw can lead to application crashes or unexpected behavior, posing risks to data integrity and application reliability. The urgency of this vulnerability is classified as unimportant, but it still warrants attention to prevent potential exploitation.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid using the specific features of the texlive-bin package that trigger the segmentation violation until an update can be applied. Additionally, running the application in a controlled environment or using alternative typesetting tools may mitigate the impact of this vulnerability.
Conclusion
In summary, CVE-2022-35024 represents a segmentation violation vulnerability in the texlive-bin package, which can affect the stability of applications using it. Users are advised to update to the latest patched version to mitigate risks. Temporary workarounds are available for those unable to update immediately.
See every vulnerability recorded for texlive-bin →
FAQ
CVE-2022-35024 is a vulnerability in the texlive-bin package that can cause segmentation violations, leading to application crashes.
This vulnerability can lead to instability in applications that rely on the texlive-bin package, potentially causing crashes or unexpected behavior.
You can check if your application is affected by this vulnerability using the Vulert playground at Vulert Scanner without any signup.
If an immediate update is not possible, consider using alternative typesetting tools or avoid features that may trigger the segmentation violation.
More information can be found in the Debian security advisories and the official CVE database.
References
Related vulnerabilities
Recent vulnerabilities recorded for texlive-bin.
