Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory write, a different vulnerability than CVE-2011-0764.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade tetex-latexUpgrade t1lib-develUpgrade texlive-dvipsUpgrade tetex-docUpgrade tetex-xdviUpgrade kpathsea-develUpgrade mendexkUpgrade tetex-fontsUpgrade texlive-utilsUpgrade texlive-dviutilsUpgrade texlive-xetexUpgrade t1lib-appsUpgrade texlive-east-asianUpgrade texlive-latexUpgrade kpathseaUpgrade t1lib-staticUpgrade texlive-afmUpgrade texlive-contextUpgrade texliveUpgrade tetex-afmUpgrade tetexUpgrade t1libUpgrade tetex-dvips | Dec 1, 2016 | Mar 31, 2011 |
| Debian | — | Upgrade xpdf | Jul 30, 2024 | Mar 31, 2011 |
| Gentoo Linux | — | Upgrade media-libs/t1lib. | Oct 30, 2017 | Mar 31, 2011 |
| Oracle_linux | — | Upgrade kpathseaUpgrade tetex-fontsUpgrade texlive-utilsUpgrade tetex-latexUpgrade t1lib-develUpgrade texlive-afmUpgrade texlive-dviutilsUpgrade tetex-docUpgrade texlive-dvipsUpgrade mendexkUpgrade t1lib-staticUpgrade tetex-afmUpgrade texlive-east-asianUpgrade tetex-dvipsUpgrade tetex-xdviUpgrade t1libUpgrade texliveUpgrade tetexUpgrade texlive-latexUpgrade t1lib-appsUpgrade kpathsea-develUpgrade texlive-xetexUpgrade texlive-context | Oct 16, 2024 | Mar 31, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 28, 2011 |
| Suse | — | Upgrade t1lib-debugsourceUpgrade t1lib-develUpgrade t1libUpgrade t1lib-debuginfo | Dec 12, 2013 | Mar 31, 2011 |
| Ubuntu | — | Upgrade libt1-5 | Nov 8, 2024 | Mar 31, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub