Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory write, a different vulnerability than CVE-2011-0764.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kpathsea-develUpgrade tetex-xdviUpgrade texlive-dvipsUpgrade tetex-fontsUpgrade tetex-latexUpgrade tetex-docUpgrade texlive-utilsUpgrade t1lib-develUpgrade mendexkUpgrade t1lib-appsUpgrade texlive-dviutilsUpgrade texlive-east-asianUpgrade texlive-contextUpgrade t1lib-staticUpgrade tetex-dvipsUpgrade tetexUpgrade kpathseaUpgrade texlive-xetexUpgrade texlive-afmUpgrade tetex-afmUpgrade texliveUpgrade texlive-latexUpgrade t1lib | Dec 1, 2016 | Mar 31, 2011 |
| Debian | — | Upgrade xpdf | Jul 30, 2024 | Mar 31, 2011 |
| Gentoo Linux | — | Upgrade media-libs/t1lib. | Oct 30, 2017 | Mar 31, 2011 |
| Oracle_linux | — | Upgrade texlive-dvipsUpgrade t1lib-staticUpgrade tetex-latexUpgrade mendexkUpgrade tetex-docUpgrade t1lib-develUpgrade texlive-afmUpgrade texlive-dviutilsUpgrade texlive-utilsUpgrade tetex-fontsUpgrade kpathseaUpgrade texlive-contextUpgrade texlive-xetexUpgrade t1libUpgrade tetex-afmUpgrade kpathsea-develUpgrade texlive-east-asianUpgrade tetexUpgrade tetex-xdviUpgrade tetex-dvipsUpgrade texlive-latexUpgrade texliveUpgrade t1lib-apps | Oct 16, 2024 | Mar 31, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 28, 2011 |
| Suse | — | Upgrade t1lib-develUpgrade t1lib-debugsourceUpgrade t1libUpgrade t1lib-debuginfo | Dec 12, 2013 | Mar 31, 2011 |
| Ubuntu | — | Upgrade libt1-5 | Nov 8, 2024 | Mar 31, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub