Ctan vulnerabilities
We track 7 vulnerabilities in Ctan products across 2 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on April 22, 2025.
Latest Ctan vulnerabilities
- 7.3 High severity
Mimetex: Improper Neutralization of Special Elements used in a Command
A directory traversal vulnerability in forkosh Mime TeX before version 1.77 allows attackers on Windows systems to read or append arbitrary files by manipulating crafted input paths.
- 7.5 High severity
Mathtex: Loop with Unreachable Exit Condition
An infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume CPU resources via crafted string in the application URL.
- 9.8 Critical severity
Mathtex: Out-of-bounds Write
Stack Overflow vulnerability in the validate() function in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in the application URL.
- 7.5 High severity
Mathtex: Buffer Copy without Checking Size of Input
Buffer Overflow vulnerability in the nomath() function in Mathtex v.1.05 and before allows a remote attacker to cause a denial of service via a crafted string in the application URL.
- 9.8 Critical severity
Mathtex: Improper Neutralization of Special Elements used in a Command
Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in application URL.
- 7.5 High severity
Mathtex: Buffer Copy without Checking Size of Input
Buffer Overflow vulnerability in the main() function in Mathtex 1.05 and before allows a remote attacker to cause a denial of service when using \convertpath.
- 9.8 Critical severity
Mathtex: Buffer Copy without Checking Size of Input
Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the length of the LaTeX string component.