CVE-2019-18604 - In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled

CRITICAL

In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled

Published Oct 29, 2019

9.8

CRITICAL

CVSS 3.1

EPSS 1.88%

In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled.

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8338		Advisory
https://github.com/TeX-Live/texlive-source/commit/9216833a3888a4105a18e8c349f65b045ddb1079#diff-987e40c0e27ee43f6a2414ada73a191a		PatchThird Party Advisory
https://lists.debian.org/debian-lts-announce/2023/05/msg00033.html		mailing-list