critical9.8
CVE-2019-18604
In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled.
Impact
In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Axohelp.C Project | Axohelp.C | before 1.3 |
| Axodraw2 Project | Axodraw2 | through 2.1.1 |
References
- NVD record
- CVE.org record
- https://github.com/TeX-Live/texlive-source/commit/9216833a3888a4105a18e8c349f65b045ddb1079#diff-987e40c0e27ee43f6a2414ada73a191a
- https://lists.debian.org/debian-lts-announce/2023/05/msg00033.html
- https://github.com/TeX-Live/texlive-source/commit/9216833a3888a4105a18e8c349f65b045ddb1079#diff-987e40c0e27ee43f6a2414ada73a191a
- https://lists.debian.org/debian-lts-announce/2023/05/msg00033.html