t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade tetexUpgrade t1lib-staticUpgrade kpathseaUpgrade texlive-latexUpgrade texlive-dviutilsUpgrade texliveUpgrade texlive-xetexUpgrade texlive-afmUpgrade texlive-dvipsUpgrade tetex-dvipsUpgrade texlive-east-asianUpgrade t1lib-appsUpgrade tetex-afmUpgrade t1libUpgrade texlive-contextUpgrade tetex-xdviUpgrade tetex-latexUpgrade texlive-utilsUpgrade kpathsea-develUpgrade t1lib-develUpgrade tetex-fontsUpgrade tetex-docUpgrade mendexk | Dec 1, 2016 | Mar 31, 2011 |
| Debian | — | Upgrade xpdf | Jul 30, 2024 | Mar 31, 2011 |
| Gentoo Linux | — | Upgrade media-libs/t1lib. | Oct 30, 2017 | Mar 31, 2011 |
| Oracle_linux | — | Upgrade texlive-dviutilsUpgrade texlive-dvipsUpgrade tetex-fontsUpgrade tetex-docUpgrade texlive-contextUpgrade t1lib-develUpgrade tetex-latexUpgrade mendexkUpgrade t1lib-staticUpgrade kpathsea-develUpgrade texliveUpgrade tetex-xdviUpgrade texlive-xetexUpgrade tetex-afmUpgrade texlive-utilsUpgrade texlive-afmUpgrade texlive-latexUpgrade t1libUpgrade tetexUpgrade tetex-dvipsUpgrade kpathseaUpgrade texlive-east-asianUpgrade t1lib-apps | Oct 16, 2024 | Mar 31, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 28, 2011 |
| Suse | — | Upgrade t1lib-debugsourceUpgrade t1libUpgrade t1lib-develUpgrade t1lib-debuginfo | Dec 12, 2013 | Mar 31, 2011 |
| Ubuntu | — | Upgrade libt1-5 | Nov 8, 2024 | Mar 31, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub