t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade tetex-afmUpgrade tetex-dvipsUpgrade texlive-latexUpgrade tetexUpgrade texlive-contextUpgrade t1lib-appsUpgrade t1lib-staticUpgrade texlive-dviutilsUpgrade texlive-xetexUpgrade kpathseaUpgrade t1libUpgrade texliveUpgrade texlive-east-asianUpgrade texlive-afmUpgrade texlive-dvipsUpgrade kpathsea-develUpgrade tetex-docUpgrade mendexkUpgrade texlive-utilsUpgrade tetex-fontsUpgrade t1lib-develUpgrade tetex-latexUpgrade tetex-xdvi | Dec 1, 2016 | Mar 31, 2011 |
| Debian | — | Upgrade xpdf | Jul 30, 2024 | Mar 31, 2011 |
| Gentoo Linux | — | Upgrade media-libs/t1lib. | Oct 30, 2017 | Mar 31, 2011 |
| Oracle_linux | — | Upgrade kpathsea-develUpgrade tetex-dvipsUpgrade t1lib-appsUpgrade texlive-east-asianUpgrade t1libUpgrade tetexUpgrade texlive-xetexUpgrade kpathseaUpgrade texlive-latexUpgrade tetex-xdviUpgrade texlive-afmUpgrade texlive-utilsUpgrade tetex-afmUpgrade texliveUpgrade texlive-dvipsUpgrade texlive-dviutilsUpgrade t1lib-develUpgrade mendexkUpgrade tetex-latexUpgrade tetex-docUpgrade tetex-fontsUpgrade texlive-contextUpgrade t1lib-static | Oct 16, 2024 | Mar 31, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 28, 2011 |
| Suse | — | Upgrade t1libUpgrade t1lib-devel | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libt1-5 | Nov 8, 2024 | Mar 31, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub