t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade texliveUpgrade texlive-dviutilsUpgrade texlive-afmUpgrade texlive-xetexUpgrade texlive-dvipsUpgrade t1libUpgrade tetex-afmUpgrade tetex-dvipsUpgrade texlive-east-asianUpgrade texlive-contextUpgrade tetexUpgrade texlive-latexUpgrade kpathseaUpgrade t1lib-staticUpgrade t1lib-appsUpgrade tetex-xdviUpgrade tetex-fontsUpgrade texlive-utilsUpgrade tetex-docUpgrade t1lib-develUpgrade kpathsea-develUpgrade tetex-latexUpgrade mendexk | Dec 1, 2016 | Mar 31, 2011 |
| Debian | — | Upgrade xpdf | Jul 30, 2024 | Mar 31, 2011 |
| Gentoo Linux | — | Upgrade media-libs/t1lib. | Oct 30, 2017 | Mar 31, 2011 |
| Oracle_linux | — | Upgrade tetex-latexUpgrade texlive-contextUpgrade tetex-fontsUpgrade t1lib-staticUpgrade texlive-dvipsUpgrade texlive-dviutilsUpgrade t1lib-develUpgrade tetex-docUpgrade mendexkUpgrade texlive-xetexUpgrade tetex-afmUpgrade kpathseaUpgrade texlive-latexUpgrade t1libUpgrade tetexUpgrade texlive-east-asianUpgrade tetex-xdviUpgrade texliveUpgrade t1lib-appsUpgrade texlive-afmUpgrade texlive-utilsUpgrade kpathsea-develUpgrade tetex-dvips | Oct 16, 2024 | Mar 31, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 28, 2011 |
| Suse | — | Upgrade t1lib-debugsourceUpgrade t1libUpgrade t1lib-develUpgrade t1lib-debuginfo | Dec 12, 2013 | Mar 31, 2011 |
| Ubuntu | — | Upgrade libt1-5 | Nov 8, 2024 | Mar 31, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub