Description

A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available, such as those with TeX Live installed.

Remediation

References

CVE-2024-43426

Related Vulnerabilities

Moodle Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2024-48896)

OpenSSL Cryptographic Issues Vulnerability (CVE-2014-3570)

WordPress Plugin GoCodes Multiple Vulnerabilities (1.3.5)

SharePoint CVE-2025-59228 Vulnerability (CVE-2025-59228)

MySQL CVE-2019-2796 Vulnerability (CVE-2019-2796)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-1287 CVE-2024-43426