tex_live vulnerabilities

CVEs whose affected-version data names the tex_live package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-63729Medium· 6.6

2mo ago

TeX Live SyncTeX Parser Heap Use-After-Free via Malformed SyncTeX File

The SyncTeX parser (synctex_parser.c) shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that allows attackers to crash applications or potentially execute arbitra…

▾ SunlitTeX Live · TeX LiveEPSS 0.12%via CVEORG