CVE-2019-18604

In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-10-29

Last modified

2024-08-05

Affected products

• Axodraw2 (Axodraw2 Project)
• Axohelp.c (Axohelp.c Project)

References

• https://github.com/TeX-Live/texlive-source/commit/9216833a3888a4105a18e8c349f65b045ddb1079#diff-987e40c0e27ee43f6a2414a…
• https://lists.debian.org/debian-lts-announce/2023/05/msg00033.html