CVE-2024-25262

Name	CVE-2024-25262
Description	texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted TTF file.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-3941-1, ELA-1225-1
Debian Bugs	1064517

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
texlive-bin (PTS)	jessie, jessie (lts)	2014.20140926.35254-6+deb8u1	vulnerable
	stretch (security)	2016.20160513.41080.dfsg-2+deb9u1	vulnerable
	stretch (lts), stretch	2016.20160513.41080.dfsg-2+deb9u2	fixed
	buster, buster (lts)	2018.20181218.49446-1+deb10u3	fixed
	buster (security)	2018.20181218.49446-1+deb10u2	vulnerable
	bullseye	2020.20200327.54578-7+deb11u1	vulnerable
	bullseye (security)	2020.20200327.54578-7+deb11u2	fixed
	bookworm	2022.20220321.62855-5.1+deb12u1	vulnerable
	trixie	2024.20240313.70630+ds-4	fixed
	sid	2024.20240313.70630+ds-5	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin	Debian Bugs
texlive-bin	source	stretch	2016.20160513.41080.dfsg-2+deb9u2	ELA-1225-1
texlive-bin	source	buster	2018.20181218.49446-1+deb10u3	ELA-1225-1
texlive-bin	source	bullseye	2020.20200327.54578-7+deb11u2	DLA-3941-1
texlive-bin	source	(unstable)	2023.20230311.66589-9		1064517

Notes

[bookworm] - texlive-bin <no-dsa> (Minor issue)
[buster] - texlive-bin <no-dsa> (Minor issue)
https://tug.org/svn/texlive/trunk/Build/source/texk/ttfdump/ChangeLog?revision=69605&view=co
https://bugs.launchpad.net/ubuntu/+source/texlive-bin/+bug/2047912
https://github.com/TeX-Live/texlive-source/pull/63
[jessie] - texlive-bin <ignored> (Minor issue)