Segmentation Violation in texlive-bin Package: CVE-2022-35484
Summary
DEBIAN-CVE-2022-35484: OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6b6a8f. Affects texlive-bin versions 2022.20220321.62855-5.1 – 2025.20250727.75242+ds-5~hurd.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The texlive-bin package is a crucial component of the TeX Live distribution, which provides a comprehensive suite of tools for typesetting documents. It includes various utilities for handling fonts, graphics, and other aspects of document preparation. This package is widely used in academic and professional settings for producing high-quality printed materials. However, it has been identified to contain a vulnerability that could lead to unexpected behavior.
Vulnerability Detail
CVE-2022-35484 is a vulnerability found in OTFCC v0.10.4, which is included in the texlive-bin package. The issue arises from a segmentation violation that occurs when the software processes certain inputs, potentially leading to application crashes or arbitrary code execution. This vulnerability can be exploited by an attacker to disrupt services or gain unauthorized access, making it critical for users of the package to address it promptly.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid using the specific features of the texlive-bin package that trigger the segmentation violation until the package is updated. It is advisable to monitor the package's documentation for any additional guidance.
Conclusion
The texlive-bin package has a known vulnerability (CVE-2022-35484) that can lead to segmentation violations. Users are strongly encouraged to update to the latest version to ensure their systems remain secure. For those unable to update immediately, it is advisable to implement workarounds and stay informed about the vulnerability.
See every vulnerability recorded for texlive-bin →
FAQ
CVE-2022-35484 is a vulnerability in the texlive-bin package that causes a segmentation violation, potentially leading to application crashes.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The risks include application crashes and the potential for arbitrary code execution, which could compromise system security.
Yes, a patched version of the texlive-bin package is available. Users should update to the latest version to mitigate the risk.
If an immediate update is not possible, avoid using the features that trigger the segmentation violation and monitor for updates.
References
Related vulnerabilities
Recent vulnerabilities recorded for texlive-bin.
