https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T22:38:04.955680+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-24106 CVE-2022-24106 2026-09-29T22:38:04.959244+00:00

In Xpdf prior to 4.04, the DCT (JPEG) decoder was incorrectly allowing the 'interleaved' flag to be changed after the first scan of the image, leading to an unknown integer-related vulnerability in Stream.cc.

 https://vulnerability.circl.lu/vuln/usn-7985-1 USN-7985-1 — texlive-bin vulnerabilities 2026-09-29T22:38:04.959391+00:00

Affected: Ubuntu:Pro:16.04:LTS: texlive-bin, Ubuntu:Pro:18.04:LTS: texlive-bin, Ubuntu:Pro:20.04:LTS: texlive-bin, Ubuntu:22.04:LTS: texlive-bin

Shin Ando discovered that the Xpdf toolkit embedded in TeX Live incorrectly handled memory when decoding certain data streams. An attacker could possibly use this issue to cause TeX Live to crash, resulting in a denial of service, or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-24106, CVE-2022-24107)

It was discovered that TeX Live allowed documents to make arbitrary network requests. If a user or automated system were tricked into opening a specially crafted document, a remote attacker could possibly use this issue to exfiltrate sensitive information, or perform other network-related attacks. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2023-32668)

It was discovered that TeX Live incorrectly handled certain TrueType fonts. If a user or automated system were tricked into opening a specially crafted TrueType font, a remote attacker could use this issue to cause TeX Live to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2024-25262)